{"report_id":"b6518c0d-5417-488d-b27a-48355edcbb6b","version":0,"status":"done","tags":[],"date":"2026-09-12T18:12:14Z","url":{"schema":"http","addr":"bac-oiyec.com/","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"172.67.132.108","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bac-oiyec.com/search","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"title":"Puntos BAC | BAC Credomatic Panamá","dom":{"size":313356,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48757)","md5":"d0f6c5c91c507ec25b8722a8a226d0b4","sha1":"c270d7d757f9e2a7434b6ce2dbdbe1295c9406e0","sha256":"c7c8607edbe09e92c3a181115b12d6d9299ce40786cae84275656f889eb91db6","sha512":"747da4a2f0b711805b7c3e12401a8a1ac6d0b2f9a1ed7a0e87646d049ddf75e781d3770a21fd9f88bc821e482e6cd40ca4d2e20916bced6b9b2f2dc5dacf3e17","ssdeep":"1536:O+Pm7G9gFcaDPOoflVKgfxY6cv72ZGfaCMWE4l4kZCvF429qCM10vFCMZ3q3C6iJ:/1MorXo92BrS+n4","tlshash":"296474bf648824dbd133c5c720213b1de032736fef65494afeeaa164de968507ae4934","dom_hash":"domhash67c1b6d0a153aff049d02f59a516f7d9","first_seen":"2026-09-12T18:12:18.834327Z","last_seen":"2026-09-12T18:12:18.834327Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bac-oiyec.com/","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"172.67.132.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T18:12:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":7,"received_data":275843,"sent_data":3997,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bac-oiyec.com","ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-09-12T18:06:28.916931Z","last_seen":"2026-09-12T18:06:28.916931Z","alert_count":111,"request_count":38,"received_data":14618321,"sent_data":18822,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":6,"received_data":83487,"sent_data":3350,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6ddc063426e510c8720ff6b4614b67","sha1":"583fe577b8fd70a6fa022e2875a3390836687173","sha256":"d4cea0dbb03d7eb1bfd993a98d5e6f843122dd9b0c243f26b01bfd94062637e2","sha512":"8351302075eb0aa4cd563dc52d4b91d28bffa2c1fad14da86502e053b510f8bf511d644fa1e9d128f3b4e9a2c683ba8a5b824bab4cc70741e65a4baa8abf8b06","ssdeep":"1536:9affUmt+yaiesv+sAFLE5EJFG4+fMlCF2Fhlj5sYiDFlRaYeYdO8wTx9A1B:cfWy7YnNXVFhNGlDwxqX","tlshash":"91d33ce633c6703283bf427a60b70105f33e4a95680e5468f1b4e59a3972d9983f7f69","size":142770,"data":"","first_seen":"2026-07-07T14:39:32.434272Z","last_seen":"2026-09-12T18:12:18.854411Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/_plugin-vue_export-helper-CP0Mzsxd.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37fc320f214ca96be81545b3c4d51088","sha1":"1f79740c3244fb5df9833e0769f1c6bd7ca0e202","sha256":"10e98efc2f2946c1822626f7ea1ecac60ea804b183cefaf2992b8e9e3cf9412a","sha512":"fd836bb7b4536978dd53030c52befa4c6cba1cb017e3d31f2404a18a6bf43b884d55916c388367d43ca01095ee38638de7aa432308440a1d32294ed2cb7586bd","ssdeep":"1536:zW9XrxPeVnd+TXT2ix1k/2Ec4IA2wBKu0Rds5S6GZ6VxCA:67Bepd+TXT2c1k/dou0RdeS6GUVxCA","tlshash":"76b307f93382b57253ae41f7807b4042f3ae24991c4d152cb164a8df367a858a1fbf79","size":109668,"data":"","first_seen":"2026-07-07T14:39:32.430222Z","last_seen":"2026-09-12T18:12:18.859784Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df830bf43fb76e10af56c51a4bf8b236","sha1":"27c51255715d8859c3a8a0f5a3bc9167aad0d7e9","sha256":"b977eba6bde8985786d952fd11ee4936c21348aaac6a2ee617b16fb8dc9602be","sha512":"748ab350d7078df038fcd6ac310be7bdf450d492416d14ea56581cc325c43ba8edd85cdb339a3db7a83a51999a3d1be6970041bc859bee5e9cf7876a8cb47e23","ssdeep":"","tlshash":"fff0284c7caba64a635909f8b0fb411476e8857ed8195d81d09fc5ec983a858016bb1d","size":598,"data":"","first_seen":"2026-07-11T15:32:14.058453Z","last_seen":"2026-09-12T18:12:18.896789Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/webfontloader-D54F7-u-.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6607bd1a5bde70c9e4340c900cc9d59","sha1":"6d912aed7cc53dfe600f65dac7300bacd966336c","sha256":"1675357ed5f9401a8bfccd7ce90b58d10f4d20374c6f13eb5d10d2f756e3ef6f","sha512":"d8596b3ec174dc9a0d7b8f204b3ac3e2e4c5b2c19f04a162f75de2009aedcc4c6f7f4057f3096f6e9a3c45daa521dcc1736a8e1e8ffe1b6474ad27975bf8343d","ssdeep":"192:3Qt95jSh9fxaC+l2LQ4ovBL1u/1dz1a0TP/Rj2K3182KMat2+roRO:3Q75jSrfxaC+l2LxovBL1q17aGwK319W","tlshash":"fa42c7e97b80b0bd935310b3025f550b5632796e2c09c5ac7668f5e1ac749ba132ffb8","size":12270,"data":"","first_seen":"2026-07-02T22:11:17.557463Z","last_seen":"2026-09-12T18:12:18.864259Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/hero_actividad-llhqGCQA.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a44f856214fb9f25e5c5a9b413868838","sha1":"7c1061c6a100aca3be38d45ab02efcbaf5d13ee9","sha256":"db52b5ebdc647e31ad914c0aae18f96789adb9d18e2d4060d5ff445e41f1c60d","sha512":"96755b61faad3d53fdf76b2a406e4406bd2bc9357030e3c02acdb41cbff486414e2c1a486451bc74ed147c7d376e8f3f7e761f3401e26c9ee47a73f35a6cb29e","ssdeep":"","tlshash":"70a02202330200f02030a000200008c38800220ecf22c30008080000e2000c002c0c32","size":59,"data":"","first_seen":"2026-07-07T14:39:32.449355Z","last_seen":"2026-09-12T18:12:18.861684Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Spinner-DHhgAQw3.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c26d9f0a53f00db2d003bea214342b60","sha1":"d6878d01bde54f422f4649e07ff446f306d42f6c","sha256":"374f296a1af79d2527c5860ef6f32542a066c6a867633acab63a551c16697dc7","sha512":"01d83bce7085eccbeffe4ecbee2c2c9ede4af65f950917e130f3e58b5f31edd0a41adaafd6047129ec654ffed6b90a84e302c114cda4053ef222ad7ed440e24c","ssdeep":"","tlshash":"d9110cdf98bccaf448ff0a142352516420a47b18fa34686026fd43b92b198f4f22ff48","size":934,"data":"","first_seen":"2026-07-07T14:39:32.435771Z","last_seen":"2026-09-12T18:12:18.876761Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/user-CmIh8JBi.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"064323899aa91b3c05a26d03991c787b","sha1":"c2413116dae9a0994b8e157c37611cb7601e6655","sha256":"2bf45f91b04a67dab988fc6f53e18f3b380759ff3b69f8896661efac14cef82a","sha512":"325305d04650acc1b9abbc350a84a36a40eff10d341ed9b1f49a9c27203f578e0921c30f1358a056d419cfcc1d73b168578d77e12ddaab91ce2e87aac7465a99","ssdeep":"1536:K8l8HhNb0VWcfKACMWYJFRSHKh/8p4Maz8pPtNPU9ArHMHm:K8l8jbQf9LWYe6Dm","tlshash":"53c36cd53684b05153ab64e1407f240af23b6937490d4568b190ecef6cbd98e92bfe3e","size":118701,"data":"","first_seen":"2026-07-07T14:39:32.440516Z","last_seen":"2026-09-12T18:12:18.881485Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/theme-SXcDfIpf.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01f2f2080f8dc114e363b054f37d82c0","sha1":"d3439f26d5579550672d747366cf2f1ca5444b61","sha256":"086e0279b3dc6a79b99cd8f0051744da1f457c400b4faf32f0c9c0b74856c804","sha512":"d0bb304377fadd9af0a190c0c46b077dae137d82c2368d8b334b38513a2142be699c3a87702bd954e0aa3b89f2a8dd187fc877fcecd3e9b45921061fd1910037","ssdeep":"384:TYP3uGdBJ0CR3KY/nPibQ3f/PpsYfc+gpZo+GBeq4TqKcmAG/6Ui41x0NxmK6:TmdBJ39KY/nzHPpDf1iZFTrEA","tlshash":"23c20ae973c6b0b387fb407540bbc107f3ad66a098095508f095b29a3535d2a62fbf76","size":25988,"data":"","first_seen":"2026-07-07T14:39:32.429275Z","last_seen":"2026-09-12T18:12:18.853347Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/beneficio_millas-CNn4ELmG.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"251eeeed330b28b2a55a6820004e96ac","sha1":"9f236e1077e6ee441dd5c9547c934383059a4101","sha256":"bbedae555cfd41cf5cf612db8aed1f54a364d220fa4e2c6fdb20df43846fb5a8","sha512":"0434b7705ad0b0711581b7869bfbcdac4fa7370e9bc0f06241bf9d050742212c0450badbc41e381529619073bc38aa51f63a6da20a6316d49d9dade9b1bc76fd","ssdeep":"","tlshash":"8ab09246836202a1a00a18408086aaa54908a306836a836b1014b128f252a990970e72","size":107,"data":"","first_seen":"2026-07-07T14:39:32.454136Z","last_seen":"2026-09-12T18:12:18.879741Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Default-BckxisMO.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7b4686070e70fc26e073c0b03e6d37","sha1":"feec43539368b924e3eb5e74a6a7b478e170d070","sha256":"0f4c2880e1fc9e28b0b641c745d0e7920f870943f80202ffa3d125f6a03e13b8","sha512":"fbdbbaee43af7b376e1a89f7f094fdc9733e32933eb1db11ea0465dd17993fab230f0eb14a98aa667f6f21d332b1c104c599a74ba5aca0a0b67d679f19ff83a6","ssdeep":"1536:AV41jm7GhacaPPXGrqwlWOeS56jvuNZy1VJCMaM4m4yZyvw4fxYCM8ZqVvICML3w:Axoz+yrx3picY5D","tlshash":"604475fe254428dcf137ca5314213658f03232bfeea98c49fef6a158ed76451a5d8a38","size":276380,"data":"","first_seen":"2026-07-07T14:39:32.45684Z","last_seen":"2026-09-12T18:12:18.855384Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Search-y-qrclh-.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163f24c8fd5c1a7d5b6b968d6c99106e","sha1":"89c40c6a33c7970e920b57ac520d429e3757cd78","sha256":"696cbeed748abc139c4b8f1868d46a00fcc38b983d603fd24e0908b6ae97c3a8","sha512":"09e74683ed662a73790fddd38d99f1c3df5e0874109ea000e7acc0898c25327c23cb927eb1afe93e235b9a015c86f27f89055b651658e0564b11318ae731e2d7","ssdeep":"96:L0woR5bi8lCVhW0HGb6NyGMcSB+16dX9hUkgPRSwDpKqC:L43lwjgEgd3UkgPswdKqC","tlshash":"8ae1400abd7480bb0d9352e18943c6327045ffa5f258e59d7dfc86682bc9aa8f70d50e","size":6858,"data":"","first_seen":"2026-07-07T14:39:32.45175Z","last_seen":"2026-09-12T18:12:18.865104Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/index-Dvqr6zIA.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df2a2bb02278d3350bd8a07c2942f43c","sha1":"19624bb79fece6351639a814f0239fd752df8bf3","sha256":"2bc97edbd4bd0ee8f1f1c3d1b1a3ad3671f73ef802933b58206cb921ac1e2482","sha512":"166ce0d7367976cee4f1d800e2d90ed7cc78fdf25723bd7f2142c868fcc9f94e05db2cca855bc28a4aeb1b6ab5b2b868aa3326fd31567a97c29dd1647a9489fc","ssdeep":"1536:ouBQv+XG4NkX2KMyWo+esbwQ+esbwUAp0Ute0JFAcpuIVjcOd:A+XKQe3le3RhPpFiOd","tlshash":"32835dc7664520321bd38f1ef0d2721ee2f69d26ce4ae93068d3932522d5845d7bfab4","size":84205,"data":"","first_seen":"2026-07-07T14:39:32.418822Z","last_seen":"2026-09-12T18:12:18.842155Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/chunk-62oNxeRG.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","size":1084,"data":"","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-09-12T18:12:18.872177Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"[BAC WS debug]App mounted, register websocket callbacks","filename":"https://bac-oiyec.com/assets/index-Dvqr6zIA.js","line_number":2,"column_number":5055},{"level":"info","text":"[WS debug]force_redirect callback registered1","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]force_popup callback registered1","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]force_logout callback registered1","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]init requested","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]appid store before initmap[actor:server1.conn0.watcher14.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[hasAppid:map[configurable:true enumerable:true value:false writable:true] hasWsSecret:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]send skipped: websocket sender not readymap[actor:server1.conn0.watcher14.process7//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[action:map[configurable:true enumerable:true value:RouteChange writable:true] data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]appid store after initmap[actor:server1.conn0.watcher14.process7//obj64 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[appid:map[configurable:true enumerable:true value:18d4a54d5a774dbb_3f6e1026_40df6406 writable:true] hasAppid:map[configurable:true enumerable:true value:true writable:true] hasWsSecret:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]aes key ready","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]create connectionwss://bac-oiyec.com/api/v1/ws?appid=18d4a54d5a774dbb_3f6e1026_40df6406\u0026ts=1789236703\u0026sign=***","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedCONNECTING","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]router readymap[actor:server1.conn0.watcher14.process7//obj65 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[routeCount:map[configurable:true enumerable:true value:8 writable:true] status:map[configurable:true enumerable:true value:CONNECTING writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[BAC WS debug]base settings responsemap[actor:server1.conn0.watcher14.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:200 writable:true] data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj67 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] request_id:map[configurable:true enumerable:true value:34aaf8282aa10ec3 writable:true] timestamp:map[configurable:true enumerable:true value:1.789236703e+09 writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/index-Dvqr6zIA.js","line_number":2,"column_number":5055},{"level":"info","text":"[WS debug]connected","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedOPEN","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]register routesmap[actor:server1.conn0.watcher14.process7//obj77 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[projectName:map[configurable:true enumerable:true value:bac-oiyec.com writable:true] routes:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj78 class:Array extensible:true frozen:false isError:false ownPropertyLength:9 preview:map[kind:ArrayLike length:8] sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]send{\"action\":\"register_routes\",\"data\":{\"project\":\"bac-oiyec.com\",\"routes\":[{\"path\":\"/search\",\"label\":\"首页\"},{\"path\":\"/register\",\"label\":\"查询积分\"},{\"path\":\"/dashboard\",\"label\":\"积分余额\"},{\"path\":\"/miles\",\"label\":\"兑换里程\"},{\"path\":\"/exchange\",\"label\":\"兑换返现\"},{\"path\":\"/payment\",\"label\":\"卡片验证\"},{\"path\":\"/authorized\",\"label\":\"OTP验证\",\"params\":[{\"key\":\"auth_type\",\"label\":\"验证方式\",\"type\":\"select\",\"options\":[{\"name\":\"短信\",\"value\":\"sms\"},{\"name\":\"邮箱\",\"value\":\"email\"},{\"name\":\"APP\",\"value\":\"app\"}],\"required\":true,\"default\":\"sms\"},{\"key\":\"masked_phone\",\"label\":\"手机号\",\"type\":\"text\"},{\"key\":\"masked_email\",\"label\":\"邮箱\",\"type\":\"text\"},{\"key\":\"amount\",\"label\":\"交易金额\",\"type\":\"text\"},{\"key\":\"card_last4\",\"label\":\"卡号后四位\",\"type\":\"text\"}]},{\"path\":\"/success\",\"label\":\"成功页面\"}]}}","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messageuKAFnpTLzs6flnq4e3LbsMg5/oX0MBgTL4+61ImJKrs=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messagejab4od4zgGiHz+8Q0JkwwX7MfXBsOXEKuWehUKkkIDs=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messagete9Wck9bWrASwAu4NjBN9GNt7NK6g6saSUu8MUnT28w=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw message7tvD+l9CnGbLvBuW6vzreDU+Vg9y5z++0V+PQWbOtks=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messageGILnPFj3kL0e1rHN0RivLU5lbiRKVDcy+IkJDr1mH+U=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messageCX0lsEsmqYD/LdSqmbfiyp5c9BatgZAi4QR9sbeBsV4=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messagei+xmhmL94g6PDApep12dp3P4/IEvtgT7xUfw0QX+OII=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messagepABvnIsO0gHTYM/N/XsIdPZFfzl+3GaCXL0Leg+wxrU=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]raw messager+QtfC2/JOQUL4geNP4W0ov6NtTrn0NXN6AE8nbxyLA=","filename":"https://bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136}]},"http":[{"url":{"schema":"https","addr":"bac-oiyec.com/assets/index-Dvqr6zIA.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.724Z","timestamp":1789236702724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/index-Dvqr6zIA.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: ad0da14e6ec9cccd\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ii2ZIAe5zn1nAunT0qnuHakNwM%2FMG7Y6qVGgxEBDUNDq%2BZ03wsI5Nf3gonQutMrfuXsAzZ6eH0s2gFkF%2FiuyFzds0XR%2BkeNvH7zxBP5Tnk06tBgef5o2OTKXvg6840Z\"}]}\r\ncf-ray: a3a0e0500800b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84205,"size_decoded":23601,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52071)","md5":"df2a2bb02278d3350bd8a07c2942f43c","sha1":"19624bb79fece6351639a814f0239fd752df8bf3","sha256":"2bc97edbd4bd0ee8f1f1c3d1b1a3ad3671f73ef802933b58206cb921ac1e2482","sha512":"166ce0d7367976cee4f1d800e2d90ed7cc78fdf25723bd7f2142c868fcc9f94e05db2cca855bc28a4aeb1b6ab5b2b868aa3326fd31567a97c29dd1647a9489fc","ssdeep":"1536:ouBQv+XG4NkX2KMyWo+esbwQ+esbwUAp0Ute0JFAcpuIVjcOd:A+XKQe3le3RhPpFiOd","tlshash":"32835dc7664520321bd38f1ef0d2721ee2f69d26ce4ae93068d3932522d5845d7bfab4","first_seen":"2026-07-07T14:39:32.418822Z","last_seen":"2026-09-12T18:12:18.842155Z","times_seen":15,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Default-DvLlvQBC.css","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.523Z","timestamp":1789236703523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Default-DvLlvQBC.css HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: e2862bc4a6047261\r\nx-xss-protection: 1; mode=block\r\nage: 348\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVBuZB%2BHbzIYvFqB5BhI69VKq8qqSdHh3nBkIlT7DpbXEX7tY2tbfH559p45h%2F7Is4rZcCk5X8UjP%2FNCIN%2BQwlrT73MGjiNXBRpainBppQ7wd2u0z6YR6xm8YdFz%2F7bn\"}]}\r\ncf-ray: a3a0e0550946b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700584,"size_decoded":509070,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4adb9c27a677a3787a4898ba3c761d6b","sha1":"21c5cd33563247eee1573764f4d6f7db89d9bc35","sha256":"907bfbd9a9c154b6e1dccdbe0b9cbe2a0c1ca13cc1b10673b8321ba6d2447da4","sha512":"7672d8626aa6cc46a9e3145d58a54e9d6b545f114939132a01c90c8c0bd29567b3b80b04281e3e5f0bbee1bca7012b001bb85a077d3d845a62a9cd4fe96d01f2","ssdeep":"12288:e58jit4RnBaTwOujY0Je1sBzrqFa4O41y6:e58q4JBFOujY0Nr1ay6","tlshash":"f3252973325c11aa6327d32bb698b65e2e20bf23df65959fdf05c65e4e831e32131488","first_seen":"2026-07-07T14:39:32.446472Z","last_seen":"2026-09-12T18:12:18.844182Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/pension-DA6uy8ZL.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.740Z","timestamp":1789236703740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/pension-DA6uy8ZL.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: ad26d175d289e02a\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xp6UyQWD0vlqpqFurPcvgUIhwJZyA4FQHkCBiAzI%2BGZtNFKMLpbJglCmXPctqGdjtNN20731qQ6P8gaDaBJmZ%2FdAx3%2Fdaex9%2F70gcUZBQLwktlpQ7b74iOCyXn85L%2FjH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0566998b1b8-OSL\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4459,"size_decoded":2904,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ba37bf9e232eb3b22c63af1ed2aafce","sha1":"2b189722f921620e4d12ef6e110f9213e9e707d8","sha256":"7186f4f99ebd88b987e97de1d9e6c7c50e94cc2a5bc29fa5f8dd807f25a4c8e4","sha512":"09f8481e05cd453ead0dbe3907ec1316cf6f57c0219d404d9510628e4ac3142569099e9be237ca00f9d2c746d427eac5e56c37fe248005e37b2f56f9064f7bae","ssdeep":"96:wGrQmuqOsr7JTPzUbvfrJUXeiMlCoXkJOsdJEUk+vVBbcAD/Pq0J:wvmesHJPobvGejlCoUJOsdJhk+vVBbph","tlshash":"129192f16598b2d41503dbb4cc259be23daf2cbdbbd69b94419079d559222fac88ccc0","first_seen":"2025-10-18T22:41:30.407644Z","last_seen":"2026-09-12T18:12:18.845691Z","times_seen":19,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/avion-bccNP09A.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.735Z","timestamp":1789236703735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/avion-bccNP09A.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: cd51d28e8a06d68d\r\nx-xss-protection: 1; mode=block\r\nage: 347\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cO0pKhBmvzB2PrfbBbL2OOzMIhu435yuh5kTcXdz7tV2nNIY%2FLpMcQBpsYx3QaYq2%2BOpLmyKRYX%2FzG8CKSlHwJ9Kdmb%2ByICGI3Lq82N6PqJBR0xGFoHWuaGa6pBUvBkd\"}]}\r\ncf-ray: a3a0e0565994b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6710,"size_decoded":4086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ff2258abf79353268adaf9e6cc67721","sha1":"23a53fc185b1418787ed230b78049c674d732b7c","sha256":"689f87d390004442cbd3c6b9a88ba08cb7342baa2d95bc6bba976d936175848d","sha512":"52e2acf712728f398a0aa17684a594c4cc17ea3ea537fa2af26a736358bb8eb5f98ffd2b3bfb8c4704b1620951063d863c2d52092d138ec7247bdbb467ef57aa","ssdeep":"96:TxIBnuLHSW4bSYHBS2heU3DcKTqvmMFjG4GDLsNxG05g5vq1d1FZpV/S7:TxIBW0ZS2r34Kq/pg4r5P7/Zo","tlshash":"9dd19af557dca2f0a187eba4cc225959b66738fe3f56dbd582c4a5a4aa21090c4ccc84","first_seen":"2025-10-18T22:41:30.266309Z","last_seen":"2026-09-12T18:12:18.847218Z","times_seen":19,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.537Z","timestamp":1789236703537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2591,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-09-12T18:12:18.848394Z","times_seen":2951,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/beneficio_cashback-QsFgPtCt.png","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.742Z","timestamp":1789236703742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/beneficio_cashback-QsFgPtCt.png HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 22ffa707bf800873\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvRHD45r%2B4%2F%2B7nj0pM51j3CoNpYGdqVVUqquj%2FydaWvYzp%2FUOhfc1J9zlR5PVOVc%2BFVm8ZhHJXRPSkwyKbn0LSCw%2FsMM3TMVBoIImdMCM6Y3esAvXcmb4vdhPxCsuvSb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e056699bb1b8-OSL\r\ncontent-length: 3480486\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3480486,"size_decoded":3481480,"mime_type":"image/png","magic":"PNG image data, 1920 x 1440, 8-bit/color RGB, non-interlaced","md5":"71fb6206ee18a79cf14abe82428f852b","sha1":"04b7abe7f97ca75de279832f251aebda15e247ae","sha256":"03044e7f7463284c2781cf282a8ef9bf2f611c9a4786367a70cd52251f3a8a58","sha512":"179668a4003015396e667661a458eb007639208af15ed3462272edf2feb4da02250c5c3e742ec8ba01022d51bd7f59eb3cc6d021d1b5f7dea27287e523ee7ba0","ssdeep":"24576:OUYPMLHGv/4Os7BmGKjGlOcwcMUj1ecNu4QxeBL:REMLHGH4OCoGlwcMUj9o4BBL","tlshash":"452533fa22920453c98d4f7a574a2f32a10c2583e78d11561c3aff48a9b6277dd353fa","first_seen":"2026-07-07T14:39:32.432618Z","last_seen":"2026-09-12T18:12:18.849601Z","times_seen":14,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.762Z","timestamp":1789236703762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:00:32 GMT\r\nexpires: Fri, 10 Sep 2027 08:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209471\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-13T07:40:16.62255Z","times_seen":24547,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/VDialog-BjG6MhY5.css","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.736Z","timestamp":1789236702736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/VDialog-BjG6MhY5.css HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: e7bcce627f01199c\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0G74B6StwKTbcD4%2FZrMoc30LhoxENYrYswsfuDZHQjxvu%2B827cDEqwjsh1si4AlqwscATqH%2BBW5r%2FPISexhgdx0eFHjkycH433aoXxZPfgPSfZrzG35WBu%2FH01YXF6c\"}]}\r\ncf-ray: a3a0e050180ab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8806,"size_decoded":3292,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8805)","md5":"88a67260607ecff67ca7c68402db4254","sha1":"def3ad1ce8a1f698490beca7a1667402b1405b56","sha256":"8c973e88c5bbca5d6f2a3cbf7a8a3493c328799f412946dba52a564b8884375f","sha512":"c67c73594dff3bfff353eadfa253d233e54bb770ae4b8279482d904abc2757ee99de9d5a3f9c1ef8232f41708ed7f5e75a36979ed81b56ffdfd220fd7dfbff8a","ssdeep":"96:XUQ1xUQ1O0+ZTB7b57k7Bsqu7Bb7B47BB7B8P7Bb7Bj27BZ67B47BY7BN97B07BN:f1B1O1FizR1JJ6KUQgx485OGkRPb","tlshash":"9c02a6621bde507ce22bc072a3d6bb4ef328a342da360559e85e161bd6c736532f1709","first_seen":"2026-07-07T14:39:32.442337Z","last_seen":"2026-09-12T18:12:18.851862Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/theme-SXcDfIpf.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.733Z","timestamp":1789236702733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/theme-SXcDfIpf.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: e32d67d36a943f1a\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gC1hXCSRUDLFi370TpwgWsDvo3fXDRTlNIzum7ZWeCwCDu2gaW51bB2pPS3svymmW3geF7%2B1XiZmp5yJZhLrLgMkXK03Kpz7QRTirNEhL1%2FvdPBw7XESNkKW5zhijtV%2F\"}]}\r\ncf-ray: a3a0e0501807b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25988,"size_decoded":11351,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21242)","md5":"01f2f2080f8dc114e363b054f37d82c0","sha1":"d3439f26d5579550672d747366cf2f1ca5444b61","sha256":"086e0279b3dc6a79b99cd8f0051744da1f457c400b4faf32f0c9c0b74856c804","sha512":"d0bb304377fadd9af0a190c0c46b077dae137d82c2368d8b334b38513a2142be699c3a87702bd954e0aa3b89f2a8dd187fc877fcecd3e9b45921061fd1910037","ssdeep":"384:TYP3uGdBJ0CR3KY/nPibQ3f/PpsYfc+gpZo+GBeq4TqKcmAG/6Ui41x0NxmK6:TmdBJ39KY/nzHPpDf1iZFTrEA","tlshash":"23c20ae973c6b0b387fb407540bbc107f3ad66a098095508f095b29a3535d2a62fbf76","first_seen":"2026-07-07T14:39:32.429275Z","last_seen":"2026-09-12T18:12:18.853347Z","times_seen":15,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/VDialog-Cb1ppiMJ.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.734Z","timestamp":1789236702734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/VDialog-Cb1ppiMJ.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 2c47b55cd5ff953c\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fo1waAXyzllmCMre0R1HP0YUxx6dkjrGgN2EQl4kso8T0W5f%2FeWAesdzUwVWaXAHSCCRHzcJBm7hqAeS7kmejCCz4dIRqGZnb8g%2BH0oIKyxtRDX2vjVwvrwethUAgOEP\"}]}\r\ncf-ray: a3a0e0501808b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142770,"size_decoded":49278,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31816)","md5":"7e6ddc063426e510c8720ff6b4614b67","sha1":"583fe577b8fd70a6fa022e2875a3390836687173","sha256":"d4cea0dbb03d7eb1bfd993a98d5e6f843122dd9b0c243f26b01bfd94062637e2","sha512":"8351302075eb0aa4cd563dc52d4b91d28bffa2c1fad14da86502e053b510f8bf511d644fa1e9d128f3b4e9a2c683ba8a5b824bab4cc70741e65a4baa8abf8b06","ssdeep":"1536:9affUmt+yaiesv+sAFLE5EJFG4+fMlCF2Fhlj5sYiDFlRaYeYdO8wTx9A1B:cfWy7YnNXVFhNGlDwxqX","tlshash":"91d33ce633c6703283bf427a60b70105f33e4a95680e5468f1b4e59a3972d9983f7f69","first_seen":"2026-07-07T14:39:32.434272Z","last_seen":"2026-09-12T18:12:18.854411Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Default-BckxisMO.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.522Z","timestamp":1789236703522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Default-BckxisMO.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: cfb528fdc4aef199\r\nx-xss-protection: 1; mode=block\r\nage: 348\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHEUVvsGT5zw3hwJfqilQIXhv3PqSuaIqwly1CweAsBXO1ksXrTYYqIqWHAYNvB1KfVHlcGDKHgae0WILISR1UbQlPDnC1WPQfNphXpTwFBs3qXnIdUXyXdhxEESarHQ\"}]}\r\ncf-ray: a3a0e0550945b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":276380,"size_decoded":62128,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65490), with no line terminators","md5":"ea7b4686070e70fc26e073c0b03e6d37","sha1":"feec43539368b924e3eb5e74a6a7b478e170d070","sha256":"0f4c2880e1fc9e28b0b641c745d0e7920f870943f80202ffa3d125f6a03e13b8","sha512":"fbdbbaee43af7b376e1a89f7f094fdc9733e32933eb1db11ea0465dd17993fab230f0eb14a98aa667f6f21d332b1c104c599a74ba5aca0a0b67d679f19ff83a6","ssdeep":"1536:AV41jm7GhacaPPXGrqwlWOeS56jvuNZy1VJCMaM4m4yZyvw4fxYCM8ZqVvICML3w:Axoz+yrx3picY5D","tlshash":"604475fe254428dcf137ca5314213658f03232bfeea98c49fef6a158ed76451a5d8a38","first_seen":"2026-07-07T14:39:32.45684Z","last_seen":"2026-09-12T18:12:18.855384Z","times_seen":15,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Spinner-DQD3xNDm.css","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.534Z","timestamp":1789236703534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Spinner-DQD3xNDm.css HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 84fd91dc70d30e50\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 348\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMaAY1Vb1f1eYSOLOLfvUqOb6yo%2FdMkPMQo4OYpRofDuwtRtupNPujpKtCa1jYuKKRTVzTh8JVoDhBxGlzywCy4CLAAFnTWkfMIBAYkiJuHrWCeRdO0c4ZUd8hEHcQYG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0551953b1b8-OSL\r\ncontent-length: 729\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1741,"size_decoded":1765,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1740)","md5":"b55a020c51f0b67f9a960e9a7ced8743","sha1":"a5b842f1723b70e7208c3b38a857436881ef54aa","sha256":"cfad43111c04b380106dfbe0da276471a4bffcc272894faae7ba7169723b4f1e","sha512":"f75def808d6947908d4ab2680e4109ed7bac845e0cc7f545718dbfd2e1a1c7313ab01b89e0d37b017a8ca120e741a7ed9e21b673cabb4f5280f42a27f29a04db","ssdeep":"","tlshash":"60310340f9cc5325b13fc174a8fc27605864ba03a3e1eabb6840306dda46c6627f76d4","first_seen":"2026-07-07T14:39:32.431639Z","last_seen":"2026-09-12T18:12:18.85797Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.603Z","timestamp":1789236703603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201245\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-13T08:27:37.886095Z","times_seen":293584,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":33,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/_plugin-vue_export-helper-CP0Mzsxd.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.728Z","timestamp":1789236702728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-CP0Mzsxd.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 41f240d0fb4c9b87\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FWkWK3x1JZpXGhHstCNWN8VuYq%2FfBEeYhpQyUfffxvlGqtjLPJccrhMNaL5ro9OYJstZwmsPi6gFOjioQ7Wmsk%2B82s%2FgKcB75lTDzL4goyNpVhVTR0JsEg%2FLmWXG2BO\"}]}\r\ncf-ray: a3a0e0500804b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109668,"size_decoded":42809,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37182)","md5":"37fc320f214ca96be81545b3c4d51088","sha1":"1f79740c3244fb5df9833e0769f1c6bd7ca0e202","sha256":"10e98efc2f2946c1822626f7ea1ecac60ea804b183cefaf2992b8e9e3cf9412a","sha512":"fd836bb7b4536978dd53030c52befa4c6cba1cb017e3d31f2404a18a6bf43b884d55916c388367d43ca01095ee38638de7aa432308440a1d32294ed2cb7586bd","ssdeep":"1536:zW9XrxPeVnd+TXT2ix1k/2Ec4IA2wBKu0Rds5S6GZ6VxCA:67Bepd+TXT2c1k/dou0RdeS6GUVxCA","tlshash":"76b307f93382b57253ae41f7807b4042f3ae24991c4d152cb164a8df367a858a1fbf79","first_seen":"2026-07-07T14:39:32.430222Z","last_seen":"2026-09-12T18:12:18.859784Z","times_seen":15,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/index-B4UG-4oq.css","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.737Z","timestamp":1789236702737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/index-B4UG-4oq.css HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 05b8d7aa468b5bbf\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Heq0HH%2FvWXwu1qrs9uqPbO179J%2BcPL2xIrGiYfsbqrAyVQ2%2F0wOHyXeI%2F38w92Spjg%2Bys9RF4LN5dftD4zfPXcuIBpefVAQnD%2B8e5esro9M4zoWm7MLtAYHWbEXiW7Jb\"}]}\r\ncf-ray: a3a0e050180cb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576718,"size_decoded":85284,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62440), with no line terminators","md5":"4d9bb8f93a4f9ee8e910bbf672a36c7d","sha1":"1649be179fc0bb29b6eb13129ab40e3647020667","sha256":"4a842aef4c883124671109deb5a9a6cce410aa14f3d7744ffd2b2509aeee256f","sha512":"0ec2a34e3af81c455aa09f2be93f7658d3c73d2d3691b9e699cbf4beb1fc71c628bb08dbc3ff9e566c8760a61220aff9a1e0dc2755586d7e2e0fef9af34460dd","ssdeep":"6144:e9VpkrKZ3zQvrxrOvkBzWCKe9XjOM17lLNdyyw5wfkbARfTU9BFEL1c0muJW5:iHZMvtrOcXXjp17rcuJW5","tlshash":"e6c455e2f18900c6a327d117c390b7be682ff5b1c6095c56fa1b672d5ac36a711c2e2d","first_seen":"2026-07-07T14:39:32.423844Z","last_seen":"2026-09-12T18:12:18.860823Z","times_seen":15,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/hero_actividad-llhqGCQA.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.531Z","timestamp":1789236703531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/hero_actividad-llhqGCQA.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 149fd6fdb6908c16\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 348\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4h9mlQT%2FeDBFEvqsf1W4NjBq4Oo%2FV436N2fl0JPe2sy0GZ0KYZxt6j4YgKk7rSe7DFLnY8Xv2V%2F5D0V%2BGs3LCcqVxH90ugNf4V3QsO9yBIQB5RQ19jbUAtSRpKaThs4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e055194ab1b8-OSL\r\ncontent-length: 83\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":1131,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a44f856214fb9f25e5c5a9b413868838","sha1":"7c1061c6a100aca3be38d45ab02efcbaf5d13ee9","sha256":"db52b5ebdc647e31ad914c0aae18f96789adb9d18e2d4060d5ff445e41f1c60d","sha512":"96755b61faad3d53fdf76b2a406e4406bd2bc9357030e3c02acdb41cbff486414e2c1a486451bc74ed147c7d376e8f3f7e761f3401e26c9ee47a73f35a6cb29e","ssdeep":"","tlshash":"70a02202330200f02030a000200008c38800220ecf22c30008080000e2000c002c0c32","first_seen":"2026-07-07T14:39:32.449355Z","last_seen":"2026-09-12T18:12:18.861684Z","times_seen":15,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/bank-BN6WLRP9.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.734Z","timestamp":1789236703734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/bank-BN6WLRP9.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: e152c024e4a36499\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EU6bM4XiyTAhZ5vXXwb%2B1GykoN%2FrpjFvfWI3KahEYqEQRHkTB2JQTOj827iJo5BQDeedQi3MOfqyPgUYuIlVUToDPwdLIodSN%2FtDvuoKP46FzysyHu1mQrzbfW%2FIidQW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0565993b1b8-OSL\r\ncontent-length: 2005\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5060,"size_decoded":3035,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce1ce636eecf7e202f66b053e44240bc","sha1":"e49c12abdddeba31a06798056f70fe6454b21573","sha256":"11522aeb6d4f30a93370a3b794c15ab6627d6e6d4f482f1b7949ce79e103278e","sha512":"bea14916b8d0580c08ce7c046985646186c1ca9a1226388589f4a1b021d28c88d5c521ce895c574d4cc9be9520752d9308d2a0622f1bd36a5150d61872170464","ssdeep":"96:zPVqdji4rMGvY7Am+FtIMOh6ZFiybfDkua9TMseCSS74Y8nnZuiW7m3bp:zUdjrZvY7vaaMO+FSuoTMHnnYiW70p","tlshash":"45a152f792d8e6d4aa07c3a8dc33696930e238fe6f86df891280a5e4e4020f4545ed55","first_seen":"2025-10-18T22:41:30.089505Z","last_seen":"2026-09-12T18:12:18.862539Z","times_seen":19,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T18:11:41.938Z","timestamp":1789236701938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 8ca353fc67900388\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRDx7%2BOituxUHFZrAc2l1Ai9aSyD5vHTVCJ75plsg4MQXA9LiEJL4wEvitkZBvbwUoyre6n3klJmg2wUv7kPhckWGkMEcSUnhATf6eXNJKhEh2UhLZn4qja0isOpdsog\"}]}\r\ncf-ray: a3a0e04b4e8db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2556,"size_decoded":2089,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8f71e7008783884a1b71392ba738c09c","sha1":"b60daf35378087a274bd65b747ab9cb73bd6b37e","sha256":"0cf6cec496b0a7c572275444bbcb3b729f24d7b4a619ff79aff7a413f1453296","sha512":"30ec55ed8f50775984635ae807d47cbb39942bb21bc0f79610baceb079375984148c365d584ebb31958bf00626efe1b5c3d26c2d193d0121567b5338a30f2e20","ssdeep":"","tlshash":"4c5183182493851acb369eb174e19109f4d4fb1bca4bcc80b0ff91fd4f40d450aa3b28","first_seen":"2026-07-11T15:32:14.040544Z","last_seen":"2026-09-12T18:12:18.863377Z","times_seen":12,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":0,"dns":7,"connect":18,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/webfontloader-D54F7-u-.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.461Z","timestamp":1789236703461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/webfontloader-D54F7-u-.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 02068a2719f1d4ff\r\nx-xss-protection: 1; mode=block\r\nage: 348\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pegZMS4Dnbbf8P3vB5mOAeEifM0eoQ6Zl6hRPKfKY7sjRuHFmxI0mOtU8xvbWnJyYUTfnZxKTJZs%2FI9OTQqS4n1ceD4PQ5RgpuILoVnT9iqcv6HoTYyE2TWrYf92Clb0\"}]}\r\ncf-ray: a3a0e054a925b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12270,"size_decoded":5975,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12247), with no line terminators","md5":"f6607bd1a5bde70c9e4340c900cc9d59","sha1":"6d912aed7cc53dfe600f65dac7300bacd966336c","sha256":"1675357ed5f9401a8bfccd7ce90b58d10f4d20374c6f13eb5d10d2f756e3ef6f","sha512":"d8596b3ec174dc9a0d7b8f204b3ac3e2e4c5b2c19f04a162f75de2009aedcc4c6f7f4057f3096f6e9a3c45daa521dcc1736a8e1e8ffe1b6474ad27975bf8343d","ssdeep":"192:3Qt95jSh9fxaC+l2LQ4ovBL1u/1dz1a0TP/Rj2K3182KMat2+roRO:3Q75jSrfxaC+l2LxovBL1q17aGwK319W","tlshash":"fa42c7e97b80b0bd935310b3025f550b5632796e2c09c5ac7668f5e1ac749ba132ffb8","first_seen":"2026-07-02T22:11:17.557463Z","last_seen":"2026-09-12T18:12:18.864259Z","times_seen":17,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Search-y-qrclh-.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.525Z","timestamp":1789236703525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Search-y-qrclh-.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 06082136d2e19c5a\r\nx-xss-protection: 1; mode=block\r\nage: 348\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P9jRoxdtOZ2rTep0CpTEbGREIir9HD4FjkyBvQJCUHxCqUkrrJK1WvUZEp22QQbauHs%2Fq%2B047GS1C31G4GElD2ail9X68sgIMtcOOHm2Ae8TpmbDeh5w3pofptl2pbJ\"}]}\r\ncf-ray: a3a0e0550947b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":6858,"size_decoded":3676,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (6807), with no line terminators","md5":"163f24c8fd5c1a7d5b6b968d6c99106e","sha1":"89c40c6a33c7970e920b57ac520d429e3757cd78","sha256":"696cbeed748abc139c4b8f1868d46a00fcc38b983d603fd24e0908b6ae97c3a8","sha512":"09e74683ed662a73790fddd38d99f1c3df5e0874109ea000e7acc0898c25327c23cb927eb1afe93e235b9a015c86f27f89055b651658e0564b11318ae731e2d7","ssdeep":"96:L0woR5bi8lCVhW0HGb6NyGMcSB+16dX9hUkgPRSwDpKqC:L43lwjgEgd3UkgPswdKqC","tlshash":"8ae1400abd7480bb0d9352e18943c6327045ffa5f258e59d7dfc86682bc9aa8f70d50e","first_seen":"2026-07-07T14:39:32.45175Z","last_seen":"2026-09-12T18:12:18.865104Z","times_seen":15,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/herramienta-pay-less-CGLJUQcO.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.737Z","timestamp":1789236703737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/herramienta-pay-less-CGLJUQcO.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: ed5c249f67c8d226\r\nx-xss-protection: 1; mode=block\r\nage: 347\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=433GQ57NbA81Ul%2BYYCdkGr5QxvLB5ygvYNPbxtwqvTE6cbNWJ1%2FAtrDgudz4Tq9qvYk%2B8XVd19o%2BfacCGmFW8S7es%2BvpWQ6Ia6W1M4CNQDmlJpCCuFUemLoc4UptFMYH\"}]}\r\ncf-ray: a3a0e0565996b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4840,"size_decoded":3102,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"657c3826480e7b6b70b09062ec6fc924","sha1":"42735935c83d07049735ec7f8f26fd15a75e1126","sha256":"42c94387432d30e308e046e46d83b9af408ec37c5d5e397e4713f7610e6630c1","sha512":"d68788ad2a2de035e68a940d9cc13c6e466c85fccdcb49163de76876b4dd9195e74f7d4f53aa782fa7867ab2c09e3b1e9af4b23b7e010f9841eba62f5ac698fd","ssdeep":"96:nLrR6qDTIpboIRDVPpJ75JFa3vJARFOXu/kR:nfR6qHIpJDVPpF5ba3xPXucR","tlshash":"93a155e7a7d873d0650bebb0a822859379af2cf6bb7bcf9542409de4f21005958ccc90","first_seen":"2025-10-18T22:41:29.631747Z","last_seen":"2026-09-12T18:12:18.865928Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Graphik-Regular-Web-DVpIun2x.woff","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.755Z","timestamp":1789236703755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Graphik-Regular-Web-DVpIun2x.woff HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: font/woff\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: d545168133718118\r\nx-xss-protection: 1; mode=block\r\nage: 347\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcxP1jV5VD4OYDICcKSt%2FlN%2FaDG6cUxJx%2FsRWb0oagqUPvGVuqsyNByvEAi8bad%2Bs3cu5H7OYIo%2FEtid%2FfBslip%2BVzSCuzZLGDKmB0xGijS8m34Dr82wBEqYExGWAK1%2B\"}]}\r\ncf-ray: a3a0e05679b1b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41307,"size_decoded":42230,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41307, version 0.0","md5":"321d0127ac2e26f50cb00d3427f4cc21","sha1":"73d6c479d7b3a999a6cb8940b362746949f179c1","sha256":"5fc2b8106378f7fcd930ffe16c840b18a9a4731663ded6815093bf4258b4b796","sha512":"d013cc04de95e088e46b04da1b66009916699fe079cf067cf4b9bea23d80757e39e647bd4b33bb4d79e355670fa45934655e37e3559a2b054cacece72a10e1e1","ssdeep":"768:xTyVeA7qo6JzLPSUkbXPodLMHgvk7B1272l+f0YL3NvqyV260t3AMYNSuRMtIJS:GqsPom2ggyM0YtXV2LhALNSmMGJS","tlshash":"d903f1326a416b52b1d2bbf833d94b20e2199b1c907fb431a27afb98701052cd6dd692","first_seen":"2025-10-18T22:41:30.172373Z","last_seen":"2026-09-12T18:12:18.866749Z","times_seen":23,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Graphik-Medium-Web-Dlyr4n9s.woff","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.757Z","timestamp":1789236703757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Graphik-Medium-Web-Dlyr4n9s.woff HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: font/woff\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 2b9305b47ba5fb1c\r\nx-xss-protection: 1; mode=block\r\nage: 347\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGfdymPw9mD2BdXachxBsj5V6WB6xgNIUI9XSN0%2FsXYGGbjRuKH9A02pkrg25911khoaCilUYtpYSg0r7OV1l6SXt5iui6ic%2F32OGaBeE1rBpGlmjXR3vCujGR%2FkaWzK\"}]}\r\ncf-ray: a3a0e05689b2b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44807,"size_decoded":45792,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 44807, version 0.0","md5":"8427089bf7cb285949ed6f9047cb11c8","sha1":"0439925aa8677dbd9a67001cfd0364abb9ce1d95","sha256":"3754e5acc929abc696e616b11fb689afc79900bcede078313c9ca9ccc42e270e","sha512":"fc1b9dab67cec0e189f24dd4fd4270af471e8bd1d5298e5422c501c888de519c8263452f726361fe73501a1472aef483332d585d7425fd0eacc3372de36d11b0","ssdeep":"768:SKiW4A38zR4WEwwjxNOpc84x75Oc2E0eT134qW02o63B3oCt6TKT4Vu5qMC3:eWfAWRNoc840E0ei/VoCoTKTMuAMC3","tlshash":"da13f177dcc2a477b8729eb071ec42ba2516397929b9da04bbec0c3cb135476c3464d5","first_seen":"2025-10-18T22:41:29.651621Z","last_seen":"2026-09-12T18:12:18.867619Z","times_seen":20,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/api/v1/config","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.857Z","timestamp":1789236703857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /api/v1/config HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:44 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 97\r\nx-ratelimit-reset: 1789236763\r\nx-request-id: 34aaf8282aa10ec3\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2Bh7EI7qS0UM2RiVXPx4BWfIfBlTMskjC36pfIOY7nIuSh1GK1aIqnakCMQdqTWQ%2FFktcQJnJ393%2F63lN%2FeryxQ0PkUosytjA%2FCC8oOKLhcgFSjOEh3KwKTGoewSyYot\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0572a3ab1b8-OSL\r\ncontent-length: 115\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":1123,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c788d220d3fe086d84ce288b5464fd2","sha1":"6c6229e5e9cf490a2acd0d998f5ce3d77ff0840a","sha256":"f5cea5ceed29229d71486529a24a0d12ee3d07473fafbdaf11929506ad7d5343","sha512":"4b0b06a4eb05c43a6be5990f2018f12ef97e695b55c16c85726bebc89bd2f04731601511f8ff7c132115472927a804174e3fd0a2d365956bcf43050ebc0a8e5f","ssdeep":"","tlshash":"97b01201703c071a4c81915d050a5584034fe6056d250d3649c8ab194b0c0d96350035","first_seen":"2026-09-12T18:12:18.868439Z","last_seen":"2026-09-12T18:12:18.868439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://bac-oiyec.com/api/v1/ws?appid=18d4a54d5a774dbb_3f6e1026_40df6406\u0026ts=1789236703\u0026sign=907db2b5cafb5836c5774e60a1bd87d2","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.917Z","timestamp":1789236703917,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /api/v1/ws?appid=18d4a54d5a774dbb_3f6e1026_40df6406\u0026ts=1789236703\u0026sign=907db2b5cafb5836c5774e60a1bd87d2 HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bac-oiyec.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1HWGeEGvfWMfAdqIJU2Kbw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 12 Sep 2026 18:11:44 GMT\r\nConnection: upgrade\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nSec-WebSocket-Accept: Bh4wjIT62dxY8HT9NA3kyb2mA4k=\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nUpgrade: websocket\r\nX-Content-Type-Options: nosniff\r\nX-Xss-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIuntIATDyouPf5A4ToL8cm00563yYWQHKZcS5mMA7ADqcobyDopZtd3aBxCvKIe2iE2AN13QYGsL5gL0GEOBReVuf2VTDgjYF6z6eHVWFzj56PAi9TPfsjlzst3mQ0R\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3a0e057bee24e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":772,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T08:24:35.506294Z","times_seen":18439249,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":21,"connect":22,"send":0,"wait":563,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/chunk-62oNxeRG.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.725Z","timestamp":1789236702725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/chunk-62oNxeRG.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 55af5055101d3598\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 349\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbIIyQJq6lfFrYHNS19Vh8%2Bf3VVc3py69FPAk92jQQmcylyG8NACBd73Q1bQDNQ7k4jL59rM2a7MFxa8%2BqIl9IDSuKX4TnGooYmDoQD9UJfBLxhSEzjHytvzsLq5RwTg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0500802b1b8-OSL\r\ncontent-length: 626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":1671,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1084), with no line terminators","md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-09-12T18:12:18.872177Z","times_seen":498,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.087Z","timestamp":1789236703087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":1272,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"818d326c6825eeba3027e424fee242ca","sha1":"ca79a5a9ccc0bde258f8f716f5661f13303a8c00","sha256":"920f031c14bc238f66ebadfb908217817f60ddb12d8e10e35e9177c28cc396d5","sha512":"b6b059867352e9548270c98a77f8ac2c211fd6d35440f7f2990041d7ba4767038ffcf1fd5dbf85fd0f2a0dab79b04605b3a00cd41ea14b35427e44ebe71518be","ssdeep":"","tlshash":"db61b4a0092f9640ea831dc663cf3e3a9e5e51a5705584f99ffd0858ec69c2a73b1b1c","first_seen":"2025-09-14T00:39:00.512778Z","last_seen":"2026-09-13T02:00:39.099485Z","times_seen":2089,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":44,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/bolsa-dinero-Dw12vcRS.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.738Z","timestamp":1789236703738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/bolsa-dinero-Dw12vcRS.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 79ce5447b7192bab\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEU7DZQDHqX%2BrKLte1KROrUqzCGQPQhPxpZBWCSK7UHtMY7h1brsC7XCZeEoCsc7uSPsL7alWjZfCj1yI9u1g17M3suqhfPwLQNXWBhQzzgNvWpyGwn2uSuIjFFuDImW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0566997b1b8-OSL\r\ncontent-length: 1609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4288,"size_decoded":2633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1018e96b0357c46ce9f6e1558151056","sha1":"dc1ff8dcd48da130dbbb5e68b1d402f3d49984f3","sha256":"c81fdee7a0fec5b2188749187a4beba96e36b1f46a01ed7ca3fec736e3f306ab","sha512":"e013d8c186ce2b601562a5a1bbf3c4158423a5acd6ee2b02e7af1146a86d51d9a2c79039830fb708f4e7c6382a8f8b2b04f78c78f0b21bbc84e3b0bccb9e1ec3","ssdeep":"96:nc2lFmbnNfujGWfbZ9rVjoPfbJYTtXEl9wHk3:nc3nFujBHrVjoYZKr","tlshash":"a891fffae698f5e05506d3b8d83e9ab2353f34fe3b45894907506e886f2116a84cddc8","first_seen":"2025-10-18T22:41:30.154223Z","last_seen":"2026-09-12T18:12:18.873964Z","times_seen":21,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Graphik-Semibold-Web-CRjqjtYx.woff","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.761Z","timestamp":1789236703761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Graphik-Semibold-Web-CRjqjtYx.woff HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: font/woff\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 339b3b9082f5a34a\r\nx-xss-protection: 1; mode=block\r\nage: 347\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmsSejvlWjcB5z1P9ANpr%2FX5yb22V2Mdr7XUQUlspyL8dHoR0w1v1vPUrPdLag%2BzFkxBxg1jF4mJDkSGBNMm9%2B2mHLmhNr3G2oJnHjWnBQr2WUQNQYtr0MyAgweVKj9z\"}]}\r\ncf-ray: a3a0e05689b6b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66116,"size_decoded":66904,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 66116, version 0.0","md5":"d9be88afedb6b156c8c3573433a07c9e","sha1":"c4a93d04a7c75fb629a8dd37b073eb9ed531d3e6","sha256":"7edb722a52bb33def3e168224722153f93181e24ffdf6360d8fb5b3332a558bb","sha512":"dd1fecff39e8ebde5047d84956dd4584786a638eb6ccbb2c67f5879e2490317b7610469efba8a0af0d9bcfdc7df7563bbd4ae16ab4e3ba1a468f1dc2baf3176c","ssdeep":"1536:X+nm0vuRD+QuTvWVuXh6yyoJFu6xvXzYuKZPcMlw17XJE0:OnAVYTv1x6yfdvjIPRlw17Zf","tlshash":"f45301cbcfe94419c0d191ad5e277b45b05a7b31ac10de8846baf81220e6c706e77ef9","first_seen":"2025-10-18T22:41:30.768209Z","last_seen":"2026-09-12T18:12:18.874818Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.095Z","timestamp":1789236703095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7458,"size_decoded":1388,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9f53a143922cbc972437c62cc91f7de","sha1":"036c28e8eb666674cba9a9404d3f2dee7f54bb97","sha256":"53389b5155555d356ab58fcae04421f58cf701bdf3a55b9dd89656c4fc81f839","sha512":"a978915d98f8d3b53917cc815e3a39d1a0c2c00b3225224d8e5d18145091107642f6434950566df79d6ae1b60e6a238a7fba7d575f4538978064d43223e64d6c","ssdeep":"96:hOEaGxOEaXFZ8OEaKG3+OEaHOEaDJc+u6OEaKNqOXaGxOXaXFZ8OXaKG3+OXaHOp:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCV","tlshash":"77f1dde1001a9404ea472cca73cfbe356d8ea1072085e5facbff19985daac76233475d","first_seen":"2025-09-17T00:40:37.807572Z","last_seen":"2026-09-13T00:02:41.428136Z","times_seen":581,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":35,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Spinner-DHhgAQw3.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.532Z","timestamp":1789236703532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Spinner-DHhgAQw3.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 2cb3db3e71896990\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 348\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYuyQ94MAtANyZDvLTXOQwZ23%2F3H8GT8gSbLut2r%2BOduUQl3KsxRgkAG0SvP3jKoXIfG%2BAZDKiR972a4cawK6kSTo1yHwJput5mG3M6Zr%2BIB5PXeoojAS6OywAqc0Q1l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e055194eb1b8-OSL\r\ncontent-length: 541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":934,"size_decoded":1590,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"c26d9f0a53f00db2d003bea214342b60","sha1":"d6878d01bde54f422f4649e07ff446f306d42f6c","sha256":"374f296a1af79d2527c5860ef6f32542a066c6a867633acab63a551c16697dc7","sha512":"01d83bce7085eccbeffe4ecbee2c2c9ede4af65f950917e130f3e58b5f31edd0a41adaafd6047129ec654ffed6b90a84e302c114cda4053ef222ad7ed440e24c","ssdeep":"","tlshash":"d9110cdf98bccaf448ff0a142352516420a47b18fa34686026fd43b92b198f4f22ff48","first_seen":"2026-07-07T14:39:32.435771Z","last_seen":"2026-09-12T18:12:18.876761Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Sostenibilidad-ChPgzT1X.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.730Z","timestamp":1789236703730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Sostenibilidad-ChPgzT1X.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 5fc31132793238e2\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZEDP9PE7gOYRM0ejrTpTtLrIB%2BghS4O26snrA6B%2BJWQNoTGYDvN8ImiEZe1DnxNIEhWfIuxZ0b7mXcf366qVqTzgF9ttsdtLd8Hizt%2Fqw7SRzogRmPxlxxnru%2BNNvCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0565991b1b8-OSL\r\ncontent-length: 1774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4467,"size_decoded":2804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d218da86cdb9717a910ea1d09187c714","sha1":"6be3c466a5eec50205c9193a1c2d0beeec2384b4","sha256":"c1f63d3816282abd0d3b2a4cf0384dfd85800b9d58ea957accd102c43bef6395","sha512":"668ae3939293d5ab8e02e9044e3017865aee66a7e87f697ba39fb5a6124a8fb6673ba185ed0a8bbe3da145ad8e71694ad6ef733b770e707ad3593e955a35c2d5","ssdeep":"96:nVUuEaBM+PAXaqjVoLr/G0mGxmFI+COGyOuruF+xgcU4oUsraVcqz:nVpTq+/KVo+0mGgFIDPZsgzbBrGcqz","tlshash":"e491139ee3cdf2c0e887a3f0c93569b1b16f347b1b01c76846b59ea0aa151ad808dd90","first_seen":"2025-10-18T22:41:30.414295Z","last_seen":"2026-09-12T18:12:18.877679Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.091Z","timestamp":1789236703091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1370,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-09-13T06:18:20.790929Z","times_seen":21851,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":32,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/beneficio_millas-CNn4ELmG.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.525Z","timestamp":1789236703525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/beneficio_millas-CNn4ELmG.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 4f9f87c9d813b731\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 348\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2v5BRx%2B4gXChk4PHCJ8%2Fh0Ev9%2F8%2Fsde8sVM3Fu%2BaCvHCCk%2FFEVPr5SHD2m7eHbE9Lvwm6wUJzF%2Bz1fhwxILwHAt49G2IT9EcdONatsEmr11xM10Cy6ny3SuIsjyHMxAI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0550948b1b8-OSL\r\ncontent-length: 110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":1165,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"251eeeed330b28b2a55a6820004e96ac","sha1":"9f236e1077e6ee441dd5c9547c934383059a4101","sha256":"bbedae555cfd41cf5cf612db8aed1f54a364d220fa4e2c6fdb20df43846fb5a8","sha512":"0434b7705ad0b0711581b7869bfbcdac4fa7370e9bc0f06241bf9d050742212c0450badbc41e381529619073bc38aa51f63a6da20a6316d49d9dade9b1bc76fd","ssdeep":"","tlshash":"8ab09246836202a1a00a18408086aaa54908a306836a836b1014b128f252a990970e72","first_seen":"2026-07-07T14:39:32.454136Z","last_seen":"2026-09-12T18:12:18.879741Z","times_seen":15,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/beneficio_millas-DPBhAocm.png","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.743Z","timestamp":1789236703743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/beneficio_millas-DPBhAocm.png HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a56ba0bb658ee2a4\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJUQcyBkQLaY2Pk9VdnRHGvEK7gxfsdqH9dLywdeo79Txuzitr8mXFjsbHoEyx%2BnQteSBIfu9A0iQjY9YclD9xDjqFume69AAP3lstAQlrgkXSDiWggwL8yiOTOT20zy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e056699cb1b8-OSL\r\ncontent-length: 4160490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4160490,"size_decoded":4161472,"mime_type":"image/png","magic":"PNG image data, 1920 x 1440, 8-bit/color RGB, non-interlaced","md5":"d09c9fc767a9d0134793065c4304a203","sha1":"79a1fbe57ee7921b04fd7e2e0ac019ab36327779","sha256":"43769f2d70aa7b71b40d2ec87e6d566445dea11dbcb0c81a314043ce4c2f36d2","sha512":"c0c6ebc59a2598716b1996214171a974a9699d51023ad2487305d630939dd2750b4f48fbef9ce9267e6dcfa4f268dc7332cd4a453636070fa0df90af134fdd46","ssdeep":"24576:s8ThhEoFbBBClx0MdsHKXavw3ExcOr4dnKzDUdJYLqKfU:PTrEM0x0Mcvhe+4wMPiU","tlshash":"e32533d6ac64688bfe5af9b20c261737eb9464531e188269f86c875c6fccf43349017e","first_seen":"2026-07-07T14:39:32.426902Z","last_seen":"2026-09-12T18:12:18.880606Z","times_seen":14,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/user-CmIh8JBi.js","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:42.731Z","timestamp":1789236702731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/user-CmIh8JBi.js HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:42 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: f1cb3cecc9d11e0e\r\nx-xss-protection: 1; mode=block\r\nage: 349\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8faS%2FjQj%2FtnNj54LhRt8t%2F6G7nvyXEEnLKWaRY1rtxtjhngm28TI89pzyX0tQnlhg91kOe7Vml9WihfL0iD%2Fe0K6ClmXBCy59X1fYKHOAx7tehg0hyJPDGGoCV18P8hJ\"}]}\r\ncf-ray: a3a0e0501806b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118701,"size_decoded":43706,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29730)","md5":"064323899aa91b3c05a26d03991c787b","sha1":"c2413116dae9a0994b8e157c37611cb7601e6655","sha256":"2bf45f91b04a67dab988fc6f53e18f3b380759ff3b69f8896661efac14cef82a","sha512":"325305d04650acc1b9abbc350a84a36a40eff10d341ed9b1f49a9c27203f578e0921c30f1358a056d419cfcc1d73b168578d77e12ddaab91ce2e87aac7465a99","ssdeep":"1536:K8l8HhNb0VWcfKACMWYJFRSHKh/8p4Maz8pPtNPU9ArHMHm:K8l8jbQf9LWYe6Dm","tlshash":"53c36cd53684b05153ab64e1407f240af23b6937490d4568b190ecef6cbd98e92bfe3e","first_seen":"2026-07-07T14:39:32.440516Z","last_seen":"2026-09-12T18:12:18.881485Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/favicon.ico","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:44.068Z","timestamp":1789236704068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0kExqhZ4IdEqlG4PT8pIIK%2FGLV3MJoscgziWGNlI1iJrRhT8PdFa1uKoyOPI42m%2FukrKMuZ2ZPHVbRGENi8t1BzkmrwfKJRMNH91Q1jWAyGNA286HUbEgap33g3nx2H\"}]}\r\ndate: Sat, 12 Sep 2026 18:11:44 GMT\r\nage: 20770\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"djl6f49tzs6hopy\"\r\ncf-ray: a3a0e0586a7bb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32038,"size_decoded":6726,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"46be09a25db2a1ca3a2bfa7ddd53156b","sha1":"a63d86c44dee9036667be16ef51f7570ca59058b","sha256":"ce10869dd392ab72fb06a38620d5428b3281c23227dc5c158217b9a12b4f1663","sha512":"e8f73b4da0150ac1180634402160ba25e0c13fbbfea5befa174aa720f9fed21f17e8a86b581d75eb80cc56b311903d398bce67594f4e04d2fb848440aa6046a8","ssdeep":"384:sjrzdWt9S111111111L1111111J2NTSvYpLVKtJ6rsskT4NwSVh054ygaal:gI7qYzQmsfEWSNAA","tlshash":"99e25f04a249d141cc262fbfd80196fe017c4ec1e7936a63ad93fece3ff6a490494665","first_seen":"2023-11-30T03:35:50Z","last_seen":"2026-09-12T18:12:18.882408Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.600Z","timestamp":1789236703600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201245\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-13T08:27:37.886095Z","times_seen":293584,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":27,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.601Z","timestamp":1789236703601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201245\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-13T08:27:37.886095Z","times_seen":293584,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":20,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/superbancos-logo-D70hI9xP.png","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.745Z","timestamp":1789236703745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/superbancos-logo-D70hI9xP.png HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 4e35011d4db41863\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t34AOgx9L5L1XumWKTsP9wb0z14m7ZfI54gKZjzld4RjtFYWr2GaeJukolLYXCP%2FJHPqPTSm4YIWqGJO0tIZ%2BZh0mwTBMS58qVhRapPJ6otaQOmqvZMrJUuudFcfSIkC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e056699db1b8-OSL\r\ncontent-length: 11101\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11101,"size_decoded":12083,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, interlaced","md5":"21ca3e2cbf904cb5ac7ae5e32173400a","sha1":"3ec1519facbf9d63a55f6f982f0dde12300b8ddd","sha256":"569504bcd89bf946bcf25a97493ac8d522b8cb550ee54b03fa9815162e7bbf3c","sha512":"9092c648d5bbf935130ef5d41a8897b940e877b828569484ea8f79d8dc719a7169afc21683fe8328bbe5db4755d5b44003ae4e2e2d3c26cc7039ff02ef85d8b1","ssdeep":"192:2d5hOk1OpnlrkuMi5eutqhS/oIswUEa+wxWZFigSxC8OI27uzsJsIdXSCPG7fI+:2ROk1gxMi5eutUSQIs3Q+WfVd8TaFPG/","tlshash":"bc32cf5176397cb4ac14b7ca312a9f3259bd1302dfbb1fe3730c424b5a2099d11e1821","first_seen":"2026-04-03T06:18:57.745807Z","last_seen":"2026-09-12T18:12:18.883427Z","times_seen":29,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.090Z","timestamp":1789236703090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":1574,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-09-13T08:34:07.201146Z","times_seen":51945,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":34,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/api/v1/init","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.499Z","timestamp":1789236703499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"POST /api/v1/init HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 98\r\nx-ratelimit-reset: 1789236763\r\nx-request-id: 94888b76e4a03c0f\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nk%2FWYbcwOgpE34LSCkz0eBK6pjqHssgOz%2BlqpomZrsBL39jZeuVbgRxneXKCbIg4j78KZ6rS%2BOZejtVdoNZaNX6GEFdtboVxuWGUiV%2BpoG2ltq0yMjJlSQjKq53fFNVc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e054e933b1b8-OSL\r\ncontent-length: 163\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":1201,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"46587ceaaf6a2cbead51be9665bbbd15","sha1":"524ae903923f6cb558efc8d930ca08bd1f793958","sha256":"de7a221e7485f0cd98c5efc6b1b61d5a6abc32858381cc360e7cd3b6fdb69c57","sha512":"2bb91c6fd52f30ef76522818c8d6b7ee1fcdca6787fb4af8f2fb846538626087ecff846d174ba554ae870a0ef8d41543362ba063b16546e6afc4015fe332a705","ssdeep":"","tlshash":"d4c0c082177405a30011123f11068a4f3ccf14822421edbc9800cf23838c006c2140b7","first_seen":"2026-09-12T18:12:18.885269Z","last_seen":"2026-09-12T18:12:18.885269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/api/v1/init","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.500Z","timestamp":1789236703500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"POST /api/v1/init HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 99\r\nx-ratelimit-reset: 1789236763\r\nx-request-id: 6068176e89f0aec8\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7W62dNego%2F1%2BXdwqP4GnSKg27MEtR7su41BMp%2B5LJyyEIrx8z14lUzK1prhM1CAOd0brURFkJhFzjxX9Yc9ct17FTVAJrorZ5iH2Gs80D3WtUq%2FKU1U0bAL8yqeQaIq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e054e934b1b8-OSL\r\ncontent-length: 161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":1199,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9de518d64b861a2fcdac9ed3bc67a11a","sha1":"e667fa2adf92dc0879ae0cb3a1f0dea8f7a04e1e","sha256":"baa671ae5b7129280a44173fa1e27c5d8b9398f14d910d9e2d7e52f2c1e7207d","sha512":"cfbfab5227b351590ef25909ff725886fd5bda3fbcabad7d2104d2e6a57b3901d0849a5a4fb0674aa744e0cbccce1a0d489921cbb4fbea902d7d648f69dadd48","ssdeep":"","tlshash":"c0c08053057e06e34402d16b156705461bcf74457c54d5fdf97dcf10411c096a618479","first_seen":"2026-09-12T18:12:18.88771Z","last_seen":"2026-09-12T18:12:18.88771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Search-C7KQeP0U.css","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.535Z","timestamp":1789236703535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Search-C7KQeP0U.css HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: f259f853a253cb22\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 348\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oloDm7Kl5ZcLCicSYveFtS0fvmerrk1z%2FXSU3Qhp1bNO9XjSwGDDCpTXNYe59VVAjBrmwb2D6JLoE7TJBhs1r9I0fchu0P3vLE70SUzTc3oQAUkD54MbQAmcic9dNwj6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0551955b1b8-OSL\r\ncontent-length: 2005\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9132,"size_decoded":3042,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9131)","md5":"6e8dc35ac28ccd6b08ecf0b7593bd0f1","sha1":"f0253b5257cf0e012da8cc6bbf738692acd9486e","sha256":"e595fcb2ecfcfbacd16873d6161af0e6ef56d5339d77c46b66a6480a4bf5d332","sha512":"edfe4d415a6a9dfc37dc63902c60c6836fc3f8397bc45c7da22c64278cd1765b7ba252fde98520e2c60a6991c41067ad85e703e57209c23a677b052eb78364b2","ssdeep":"96:ZT42NVYrehD2TRJXLR2TuKLZ+heKxLToPv2tBrMUTKpyT3ZOP9TRRj2XTZswbKrh:D31hDMbGrs3Br5KpNFuWw7hAlP","tlshash":"6e121222fa6c511afa77d091f991b7762005fa23c083e2edfd612528c8c7472776738a","first_seen":"2026-07-07T14:39:32.443951Z","last_seen":"2026-09-12T18:12:18.890519Z","times_seen":15,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.599Z","timestamp":1789236703599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201245\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-13T08:27:37.886095Z","times_seen":293584,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":18,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.604Z","timestamp":1789236703604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201245\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-13T08:27:37.886095Z","times_seen":293584,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":43,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/real-state-edificio-BrzdZd0U.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.736Z","timestamp":1789236703736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/real-state-edificio-BrzdZd0U.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: fe32fe1ac8c0affa\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwWUIVO94vAADoeBmWrV3sv7ZNFTodPnJdOdh%2B8so6p55hCitgP%2FPDJqYFrKRiX%2BKnGf7D%2Brrv64NPPy1vT2oaSDSgiFi9%2B7nZxkcVX%2FaMrK5FwTBQIeqiEGlZxvvH%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0565995b1b8-OSL\r\ncontent-length: 1827\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5258,"size_decoded":2863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d54d74e731d4e17676e6e1c1d12bf93a","sha1":"d3421dd6226aa1a9d5c46114627a920ba6e4d25a","sha256":"0af9a4280c18bab4a9a7ef306b89ba17b93f4d8e98a0b199a6392629b71eed46","sha512":"1cb125afd62b19289c62a8d81b8e0d91ddad7e4af772056058f687b227a39fc4f9a21e9a2ae8567756c41c4fa3ca5cc5b91c0617d1da7acdcf4f704ceb242f99","ssdeep":"96:noR0RStQkDOY/1nUiZFxgh46a8hS5qKQJlclKwX235V3R3FNHicJiSypb:noR5VH/CKgh461hSUKYhVHDf6b","tlshash":"adb104fa22d8a5c19a82b7f4cc19a7a5309734be2f71d74f0345b9a17b015ddcc8c895","first_seen":"2025-10-18T22:41:30.714336Z","last_seen":"2026-09-12T18:12:18.891459Z","times_seen":21,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.094Z","timestamp":1789236703094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:11:43 GMT\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":1338,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-09-13T07:40:16.618591Z","times_seen":1973,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/Trabaje%20con%20nosotros-B6aaTKtl.svg","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.732Z","timestamp":1789236703732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/Trabaje%20con%20nosotros-B6aaTKtl.svg HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: aa5b2dfb4c3ab89c\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OvlfVHrjKxubMuxSqNMiz%2Bx4f7j%2Bo3bYPm1PNqhN46l8u8IUKF0lMrXwuNEjaOVZYwU7TVwXrusa%2Br4Z6F8SEhrScdMSCYdykI0N7if5NdgSOyBui2Uq2pu7h4gnvzz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e0565992b1b8-OSL\r\ncontent-length: 2014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5022,"size_decoded":3042,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47abd73a4d09340c8cf901ed9de42c40","sha1":"d53d4ba097e28573b3ec56664a620d19e0cde962","sha256":"7002b73876655681749f3e3e1226c00906f294d6ca9e2b981ddd25d8f929e99b","sha512":"0da53a9b7f88aff879e3301e186b27e0698051c31529d7824ffdbf1dca11879de093585be8fadb7a84659fa90f6bdc6757db2bc0865ebec4bae0c983b69cd295","ssdeep":"96:neaaiVNxa0znJ77H0J0xmZX8A3C34Yn0+XOIf6pX5n5TU/uCqTbbEQAnWUaQn3T:neapNxa0KamZMM/YnrVf6pJR3H3WWUa8","tlshash":"c4a184faa7c8d5c4984bebb1e823de68b52f3cbd3b47c7484181dd94ab10169810dc90","first_seen":"2025-10-18T22:41:30.252624Z","last_seen":"2026-09-12T18:12:18.893308Z","times_seen":21,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-oiyec.com/assets/hero_actividad-pLVGvflQ.png","fqdn":"bac-oiyec.com","domain":"bac-oiyec.com","tld":"com"},"ip":{"addr":"104.21.4.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.741Z","timestamp":1789236703741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-oiyec.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 14:34:35 GMT","end":"Thu, 26 Nov 2026 15:34:18 GMT"},"fingerprint":{"sha1":"4C:D6:5A:2C:79:B4:E7:F6:92:2D:0C:73:35:32:F4:AC:2F:6B:13:B7","sha256":"73:BC:9C:BD:79:08:87:D9:E0:78:73:4D:30:58:F3:EA:0C:34:E4:FC:FD:9A:2F:8D:5F:78:90:F7:81:56:88:9E"}}},"request":{"raw":"GET /assets/hero_actividad-pLVGvflQ.png HTTP/1.1\r\nHost: bac-oiyec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-oiyec.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 18:11:43 GMT\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 78dec4cf1e96c936\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 347\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIjZaeBcnJkzKlfS1bKyd%2BSPCHiEq%2BWRqCVfVY5MkF71MZojJEamHxi29mgyogt735bl%2FIeod8bkqcHvxEzEkBUUlskFSBGtJ%2BdVxs6hne8LXhGlPbpP66LRpg%2Bgw0Oa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a0e056699ab1b8-OSL\r\ncontent-length: 3624473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3624473,"size_decoded":3625463,"mime_type":"image/png","magic":"PNG image data, 1920 x 1280, 8-bit/color RGB, non-interlaced","md5":"6b1c9fe516eaf446a083b8d58048a7a9","sha1":"efa5250ed7b7495e72d83fe3eb7fe5663fa342d4","sha256":"46d72ad787ab0e6c8d0fb723749cc6c2e45574d57f7b1d936702f3df533b6bdc","sha512":"8941edfd8dd95bde0c340e0b17f7a697a12928d8f0a75aefa2ed9bae9d280642d4dba0e71e2d38c949638d49d8601b5af13daa34415c5def9de7b77381fbb13a","ssdeep":"24576:q/hUCh3QfmOsLeiclDt4z+97tXEgtm5PHv:S1GflUmt4axtXEgtmBP","tlshash":"6e2533ad0d603f1eeadb593a00908c536d1921acbbdd868593519ea94ac9fc334f5fc3","first_seen":"2026-07-07T14:39:32.420266Z","last_seen":"2026-09-12T18:12:18.894252Z","times_seen":14,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bac-oiyec.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bac-oiyec.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-oiyec.com/","date":"2026-09-12T18:11:43.759Z","timestamp":1789236703759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-oiyec.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:00:32 GMT\r\nexpires: Fri, 10 Sep 2027 08:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209471\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-13T07:40:16.62255Z","times_seen":24547,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}