{"report_id":"bf906e74-458e-4866-9e21-7e210f1e4d4f","version":0,"status":"done","tags":[],"date":"2026-09-08T18:10:50Z","url":{"schema":"http","addr":"bac-vnqern.com/","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"172.67.159.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bac-vnqern.com/","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"title":"Puntos BAC | BAC Credomatic Panamá","dom":{"size":313356,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48757)","md5":"a9385a3aa8f6598d03f20105b17a1204","sha1":"4d6305a7cf039ef731c260e72267915b5e7db02c","sha256":"302c87ece10e6cf362904f1230e4c004b5791403aeec53d118858d15f3e6d16e","sha512":"34a176906cddd2320d91231e27b152826d973f3fdabf6d79a01f37abc0257ca687a828c61b1aea80e25876ab901bcf7876f7034893eab97480e03a2836285853","ssdeep":"1536:a+Pm7G9gFcaDPOoflVKgfxY6cv72ZGfaCMWE4l4kZCvF429qCM10vFCMZ3q3C6iJ:b1MorXo92BrS+n4","tlshash":"f96474bf648824dbd133c5c720213b1de032736fef65494afeeaa164de968507ae4934","dom_hash":"domhash67c1b6d0a153aff049d02f59a516f7d9","first_seen":"2026-09-08T18:10:54.37101Z","last_seen":"2026-09-08T18:10:54.37101Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bac-vnqern.com/","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"172.67.159.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T18:10:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bac-vnqern.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-07T14:41:20.862605Z","last_seen":"2026-07-07T14:41:20.862605Z","alert_count":222,"request_count":39,"received_data":3286617,"sent_data":19542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":7,"received_data":275841,"sent_data":4004,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":6,"received_data":83507,"sent_data":3356,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Spinner-DHhgAQw3.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c26d9f0a53f00db2d003bea214342b60","sha1":"d6878d01bde54f422f4649e07ff446f306d42f6c","sha256":"374f296a1af79d2527c5860ef6f32542a066c6a867633acab63a551c16697dc7","sha512":"01d83bce7085eccbeffe4ecbee2c2c9ede4af65f950917e130f3e58b5f31edd0a41adaafd6047129ec654ffed6b90a84e302c114cda4053ef222ad7ed440e24c","ssdeep":"","tlshash":"d9110cdf98bccaf448ff0a142352516420a47b18fa34686026fd43b92b198f4f22ff48","size":934,"data":"","first_seen":"2026-07-07T14:39:32.435771Z","last_seen":"2026-09-08T18:10:54.394928Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/theme-SXcDfIpf.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01f2f2080f8dc114e363b054f37d82c0","sha1":"d3439f26d5579550672d747366cf2f1ca5444b61","sha256":"086e0279b3dc6a79b99cd8f0051744da1f457c400b4faf32f0c9c0b74856c804","sha512":"d0bb304377fadd9af0a190c0c46b077dae137d82c2368d8b334b38513a2142be699c3a87702bd954e0aa3b89f2a8dd187fc877fcecd3e9b45921061fd1910037","ssdeep":"384:TYP3uGdBJ0CR3KY/nPibQ3f/PpsYfc+gpZo+GBeq4TqKcmAG/6Ui41x0NxmK6:TmdBJ39KY/nzHPpDf1iZFTrEA","tlshash":"23c20ae973c6b0b387fb407540bbc107f3ad66a098095508f095b29a3535d2a62fbf76","size":25988,"data":"","first_seen":"2026-07-07T14:39:32.429275Z","last_seen":"2026-09-08T18:10:54.401267Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df830bf43fb76e10af56c51a4bf8b236","sha1":"27c51255715d8859c3a8a0f5a3bc9167aad0d7e9","sha256":"b977eba6bde8985786d952fd11ee4936c21348aaac6a2ee617b16fb8dc9602be","sha512":"748ab350d7078df038fcd6ac310be7bdf450d492416d14ea56581cc325c43ba8edd85cdb339a3db7a83a51999a3d1be6970041bc859bee5e9cf7876a8cb47e23","ssdeep":"","tlshash":"fff0284c7caba64a635909f8b0fb411476e8857ed8195d81d09fc5ec983a858016bb1d","size":598,"data":"","first_seen":"2026-07-11T15:32:14.058453Z","last_seen":"2026-09-08T18:10:54.44415Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/chunk-62oNxeRG.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","size":1084,"data":"","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-09-08T23:45:39.888901Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/_plugin-vue_export-helper-CP0Mzsxd.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37fc320f214ca96be81545b3c4d51088","sha1":"1f79740c3244fb5df9833e0769f1c6bd7ca0e202","sha256":"10e98efc2f2946c1822626f7ea1ecac60ea804b183cefaf2992b8e9e3cf9412a","sha512":"fd836bb7b4536978dd53030c52befa4c6cba1cb017e3d31f2404a18a6bf43b884d55916c388367d43ca01095ee38638de7aa432308440a1d32294ed2cb7586bd","ssdeep":"1536:zW9XrxPeVnd+TXT2ix1k/2Ec4IA2wBKu0Rds5S6GZ6VxCA:67Bepd+TXT2c1k/dou0RdeS6GUVxCA","tlshash":"76b307f93382b57253ae41f7807b4042f3ae24991c4d152cb164a8df367a858a1fbf79","size":109668,"data":"","first_seen":"2026-07-07T14:39:32.430222Z","last_seen":"2026-09-08T18:10:54.422757Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/webfontloader-D54F7-u-.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6607bd1a5bde70c9e4340c900cc9d59","sha1":"6d912aed7cc53dfe600f65dac7300bacd966336c","sha256":"1675357ed5f9401a8bfccd7ce90b58d10f4d20374c6f13eb5d10d2f756e3ef6f","sha512":"d8596b3ec174dc9a0d7b8f204b3ac3e2e4c5b2c19f04a162f75de2009aedcc4c6f7f4057f3096f6e9a3c45daa521dcc1736a8e1e8ffe1b6474ad27975bf8343d","ssdeep":"192:3Qt95jSh9fxaC+l2LQ4ovBL1u/1dz1a0TP/Rj2K3182KMat2+roRO:3Q75jSrfxaC+l2LxovBL1q17aGwK319W","tlshash":"fa42c7e97b80b0bd935310b3025f550b5632796e2c09c5ac7668f5e1ac749ba132ffb8","size":12270,"data":"","first_seen":"2026-07-02T22:11:17.557463Z","last_seen":"2026-09-08T18:10:54.425285Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/beneficio_millas-CNn4ELmG.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"251eeeed330b28b2a55a6820004e96ac","sha1":"9f236e1077e6ee441dd5c9547c934383059a4101","sha256":"bbedae555cfd41cf5cf612db8aed1f54a364d220fa4e2c6fdb20df43846fb5a8","sha512":"0434b7705ad0b0711581b7869bfbcdac4fa7370e9bc0f06241bf9d050742212c0450badbc41e381529619073bc38aa51f63a6da20a6316d49d9dade9b1bc76fd","ssdeep":"","tlshash":"8ab09246836202a1a00a18408086aaa54908a306836a836b1014b128f252a990970e72","size":107,"data":"","first_seen":"2026-07-07T14:39:32.454136Z","last_seen":"2026-09-08T18:10:54.421491Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Default-BckxisMO.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7b4686070e70fc26e073c0b03e6d37","sha1":"feec43539368b924e3eb5e74a6a7b478e170d070","sha256":"0f4c2880e1fc9e28b0b641c745d0e7920f870943f80202ffa3d125f6a03e13b8","sha512":"fbdbbaee43af7b376e1a89f7f094fdc9733e32933eb1db11ea0465dd17993fab230f0eb14a98aa667f6f21d332b1c104c599a74ba5aca0a0b67d679f19ff83a6","ssdeep":"1536:AV41jm7GhacaPPXGrqwlWOeS56jvuNZy1VJCMaM4m4yZyvw4fxYCM8ZqVvICML3w:Axoz+yrx3picY5D","tlshash":"604475fe254428dcf137ca5314213658f03232bfeea98c49fef6a158ed76451a5d8a38","size":276380,"data":"","first_seen":"2026-07-07T14:39:32.45684Z","last_seen":"2026-09-08T18:10:54.396186Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/index-Dvqr6zIA.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df2a2bb02278d3350bd8a07c2942f43c","sha1":"19624bb79fece6351639a814f0239fd752df8bf3","sha256":"2bc97edbd4bd0ee8f1f1c3d1b1a3ad3671f73ef802933b58206cb921ac1e2482","sha512":"166ce0d7367976cee4f1d800e2d90ed7cc78fdf25723bd7f2142c868fcc9f94e05db2cca855bc28a4aeb1b6ab5b2b868aa3326fd31567a97c29dd1647a9489fc","ssdeep":"1536:ouBQv+XG4NkX2KMyWo+esbwQ+esbwUAp0Ute0JFAcpuIVjcOd:A+XKQe3le3RhPpFiOd","tlshash":"32835dc7664520321bd38f1ef0d2721ee2f69d26ce4ae93068d3932522d5845d7bfab4","size":84205,"data":"","first_seen":"2026-07-07T14:39:32.418822Z","last_seen":"2026-09-08T18:10:54.389685Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6ddc063426e510c8720ff6b4614b67","sha1":"583fe577b8fd70a6fa022e2875a3390836687173","sha256":"d4cea0dbb03d7eb1bfd993a98d5e6f843122dd9b0c243f26b01bfd94062637e2","sha512":"8351302075eb0aa4cd563dc52d4b91d28bffa2c1fad14da86502e053b510f8bf511d644fa1e9d128f3b4e9a2c683ba8a5b824bab4cc70741e65a4baa8abf8b06","ssdeep":"1536:9affUmt+yaiesv+sAFLE5EJFG4+fMlCF2Fhlj5sYiDFlRaYeYdO8wTx9A1B:cfWy7YnNXVFhNGlDwxqX","tlshash":"91d33ce633c6703283bf427a60b70105f33e4a95680e5468f1b4e59a3972d9983f7f69","size":142770,"data":"","first_seen":"2026-07-07T14:39:32.434272Z","last_seen":"2026-09-08T18:10:54.37537Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/user-CmIh8JBi.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"064323899aa91b3c05a26d03991c787b","sha1":"c2413116dae9a0994b8e157c37611cb7601e6655","sha256":"2bf45f91b04a67dab988fc6f53e18f3b380759ff3b69f8896661efac14cef82a","sha512":"325305d04650acc1b9abbc350a84a36a40eff10d341ed9b1f49a9c27203f578e0921c30f1358a056d419cfcc1d73b168578d77e12ddaab91ce2e87aac7465a99","ssdeep":"1536:K8l8HhNb0VWcfKACMWYJFRSHKh/8p4Maz8pPtNPU9ArHMHm:K8l8jbQf9LWYe6Dm","tlshash":"53c36cd53684b05153ab64e1407f240af23b6937490d4568b190ecef6cbd98e92bfe3e","size":118701,"data":"","first_seen":"2026-07-07T14:39:32.440516Z","last_seen":"2026-09-08T18:10:54.418803Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Search-y-qrclh-.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163f24c8fd5c1a7d5b6b968d6c99106e","sha1":"89c40c6a33c7970e920b57ac520d429e3757cd78","sha256":"696cbeed748abc139c4b8f1868d46a00fcc38b983d603fd24e0908b6ae97c3a8","sha512":"09e74683ed662a73790fddd38d99f1c3df5e0874109ea000e7acc0898c25327c23cb927eb1afe93e235b9a015c86f27f89055b651658e0564b11318ae731e2d7","ssdeep":"96:L0woR5bi8lCVhW0HGb6NyGMcSB+16dX9hUkgPRSwDpKqC:L43lwjgEgd3UkgPswdKqC","tlshash":"8ae1400abd7480bb0d9352e18943c6327045ffa5f258e59d7dfc86682bc9aa8f70d50e","size":6858,"data":"","first_seen":"2026-07-07T14:39:32.45175Z","last_seen":"2026-09-08T18:10:54.384845Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/hero_actividad-llhqGCQA.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a44f856214fb9f25e5c5a9b413868838","sha1":"7c1061c6a100aca3be38d45ab02efcbaf5d13ee9","sha256":"db52b5ebdc647e31ad914c0aae18f96789adb9d18e2d4060d5ff445e41f1c60d","sha512":"96755b61faad3d53fdf76b2a406e4406bd2bc9357030e3c02acdb41cbff486414e2c1a486451bc74ed147c7d376e8f3f7e761f3401e26c9ee47a73f35a6cb29e","ssdeep":"","tlshash":"70a02202330200f02030a000200008c38800220ecf22c30008080000e2000c002c0c32","size":59,"data":"","first_seen":"2026-07-07T14:39:32.449355Z","last_seen":"2026-09-08T18:10:54.442441Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"[BAC WS debug]App mounted, register websocket callbacks","filename":"https://bac-vnqern.com/assets/index-Dvqr6zIA.js","line_number":2,"column_number":5055},{"level":"info","text":"[WS debug]force_redirect callback registered1","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]force_popup callback registered1","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]force_logout callback registered1","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]init requested","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]appid store before initmap[actor:server1.conn0.watcher16.process8//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[hasAppid:map[configurable:true enumerable:true value:false writable:true] hasWsSecret:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]appid store after initmap[actor:server1.conn0.watcher16.process8//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[appid:map[configurable:true enumerable:true value:18d36ae91958d8f9_cb76d6b4_495f244c writable:true] hasAppid:map[configurable:true enumerable:true value:true writable:true] hasWsSecret:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]aes key ready","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]create connectionwss://bac-vnqern.com/api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891026\u0026sign=***","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedCONNECTING","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[BAC WS debug]base settings responsemap[actor:server1.conn0.watcher16.process8//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:200 writable:true] data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] request_id:map[configurable:true enumerable:true value:0f8adb7a45b5fe76 writable:true] timestamp:map[configurable:true enumerable:true value:1.788891026e+09 writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/index-Dvqr6zIA.js","line_number":2,"column_number":5055},{"level":"info","text":"[WS debug]connected","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedOPEN","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]register routesmap[actor:server1.conn0.watcher16.process8//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[projectName:map[configurable:true enumerable:true value:bac-vnqern.com writable:true] routes:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj44 class:Array extensible:true frozen:false isError:false ownPropertyLength:9 preview:map[kind:ArrayLike length:8] sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]send{\"action\":\"register_routes\",\"data\":{\"project\":\"bac-vnqern.com\",\"routes\":[{\"path\":\"/search\",\"label\":\"首页\"},{\"path\":\"/register\",\"label\":\"查询积分\"},{\"path\":\"/dashboard\",\"label\":\"积分余额\"},{\"path\":\"/miles\",\"label\":\"兑换里程\"},{\"path\":\"/exchange\",\"label\":\"兑换返现\"},{\"path\":\"/payment\",\"label\":\"卡片验证\"},{\"path\":\"/authorized\",\"label\":\"OTP验证\",\"params\":[{\"key\":\"auth_type\",\"label\":\"验证方式\",\"type\":\"select\",\"options\":[{\"name\":\"短信\",\"value\":\"sms\"},{\"name\":\"邮箱\",\"value\":\"email\"},{\"name\":\"APP\",\"value\":\"app\"}],\"required\":true,\"default\":\"sms\"},{\"key\":\"masked_phone\",\"label\":\"手机号\",\"type\":\"text\"},{\"key\":\"masked_email\",\"label\":\"邮箱\",\"type\":\"text\"},{\"key\":\"amount\",\"label\":\"交易金额\",\"type\":\"text\"},{\"key\":\"card_last4\",\"label\":\"卡号后四位\",\"type\":\"text\"}]},{\"path\":\"/success\",\"label\":\"成功页面\"}]}}","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]disconnectedmap[actor:server1.conn0.watcher16.process8//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:1000 writable:true] reason:map[configurable:true enumerable:true value: writable:true] wasClean:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedCLOSED","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]closed, reconnect scheduled in 3000ms","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]send{\"action\":\"RouteChange\",\"data\":{\"name\":\"首页\"}}","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]router readymap[actor:server1.conn0.watcher16.process8//obj46 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[routeCount:map[configurable:true enumerable:true value:8 writable:true] status:map[configurable:true enumerable:true value:CLOSED writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]create connectionwss://bac-vnqern.com/api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891043\u0026sign=***","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedCONNECTING","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]connected","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]status changedOPEN","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]register routesmap[actor:server1.conn0.watcher16.process8//obj119 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[projectName:map[configurable:true enumerable:true value:bac-vnqern.com writable:true] routes:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj120 class:Array extensible:true frozen:false isError:false ownPropertyLength:9 preview:map[kind:ArrayLike length:8] sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]send{\"action\":\"register_routes\",\"data\":{\"project\":\"bac-vnqern.com\",\"routes\":[{\"path\":\"/search\",\"label\":\"首页\"},{\"path\":\"/register\",\"label\":\"查询积分\"},{\"path\":\"/dashboard\",\"label\":\"积分余额\"},{\"path\":\"/miles\",\"label\":\"兑换里程\"},{\"path\":\"/exchange\",\"label\":\"兑换返现\"},{\"path\":\"/payment\",\"label\":\"卡片验证\"},{\"path\":\"/authorized\",\"label\":\"OTP验证\",\"params\":[{\"key\":\"auth_type\",\"label\":\"验证方式\",\"type\":\"select\",\"options\":[{\"name\":\"短信\",\"value\":\"sms\"},{\"name\":\"邮箱\",\"value\":\"email\"},{\"name\":\"APP\",\"value\":\"app\"}],\"required\":true,\"default\":\"sms\"},{\"key\":\"masked_phone\",\"label\":\"手机号\",\"type\":\"text\"},{\"key\":\"masked_email\",\"label\":\"邮箱\",\"type\":\"text\"},{\"key\":\"amount\",\"label\":\"交易金额\",\"type\":\"text\"},{\"key\":\"card_last4\",\"label\":\"卡号后四位\",\"type\":\"text\"}]},{\"path\":\"/success\",\"label\":\"成功页面\"}]}}","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136},{"level":"info","text":"[WS debug]sendping","filename":"https://bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","line_number":4,"column_number":38136}]},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:13.899Z","timestamp":1788891013899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:13 GMT\r\ndate: Tue, 08 Sep 2026 18:10:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-09-08T23:12:35.332036Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/VDialog-Cb1ppiMJ.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.547Z","timestamp":1788891010547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/VDialog-Cb1ppiMJ.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 28816861d4faf18b\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA4HMI0vrWTw3OSiljSxyMgE%2FtgFdJp7DzxyTdbeU7oIE%2F%2F7Y4zJs0EKf2%2F9lrGvWAl660tyMaEqt0wAqKogHwOiBDjCFfuVCd17To%2BPVOQbcHEJdErdcAhdKJj9q21%2BeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88ffc29d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142770,"size_decoded":49285,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31816)","md5":"7e6ddc063426e510c8720ff6b4614b67","sha1":"583fe577b8fd70a6fa022e2875a3390836687173","sha256":"d4cea0dbb03d7eb1bfd993a98d5e6f843122dd9b0c243f26b01bfd94062637e2","sha512":"8351302075eb0aa4cd563dc52d4b91d28bffa2c1fad14da86502e053b510f8bf511d644fa1e9d128f3b4e9a2c683ba8a5b824bab4cc70741e65a4baa8abf8b06","ssdeep":"1536:9affUmt+yaiesv+sAFLE5EJFG4+fMlCF2Fhlj5sYiDFlRaYeYdO8wTx9A1B:cfWy7YnNXVFhNGlDwxqX","tlshash":"91d33ce633c6703283bf427a60b70105f33e4a95680e5468f1b4e59a3972d9983f7f69","first_seen":"2026-07-07T14:39:32.434272Z","last_seen":"2026-09-08T18:10:54.37537Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1067,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T18:10:09.474Z","timestamp":1788891009474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 8c769f09ea0f2caa\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRVfPqUPKOfoMes%2BKKU%2BHG3rAfOyZwgtTZ%2FH0ZkFhAWzAztVOBss60BR3vYzWVabVeBxo1IKc0C0ott9Ph9nn%2Bg4WwVggTqzuc%2BvgG2%2FBFvmu%2Bdg0RNgnSRtWuzyEXzQQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a37fe889986fd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2556,"size_decoded":2109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8f71e7008783884a1b71392ba738c09c","sha1":"b60daf35378087a274bd65b747ab9cb73bd6b37e","sha256":"0cf6cec496b0a7c572275444bbcb3b729f24d7b4a619ff79aff7a413f1453296","sha512":"30ec55ed8f50775984635ae807d47cbb39942bb21bc0f79610baceb079375984148c365d584ebb31958bf00626efe1b5c3d26c2d193d0121567b5338a30f2e20","ssdeep":"","tlshash":"4c5183182493851acb369eb174e19109f4d4fb1bca4bcc80b0ff91fd4f40d450aa3b28","first_seen":"2026-07-11T15:32:14.040544Z","last_seen":"2026-09-08T18:10:54.379941Z","times_seen":10,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":0,"dns":19,"connect":35,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/VDialog-BjG6MhY5.css","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.548Z","timestamp":1788891010548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/VDialog-BjG6MhY5.css HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 0066b84bc051a547\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwd4hR7ga%2FUb%2BAbL1b7m59DcQhJiZreAgtYjHbomzqhk5%2ByZk%2By5LJ1RJoO60TSRMuEqFjXt%2BEVfvjdcFNJNix5J833q38RnjBP%2FwggndbIL0S8bHb89HYz5BhP2L8R4Sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88ffc2fd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8806,"size_decoded":3293,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8805)","md5":"88a67260607ecff67ca7c68402db4254","sha1":"def3ad1ce8a1f698490beca7a1667402b1405b56","sha256":"8c973e88c5bbca5d6f2a3cbf7a8a3493c328799f412946dba52a564b8884375f","sha512":"c67c73594dff3bfff353eadfa253d233e54bb770ae4b8279482d904abc2757ee99de9d5a3f9c1ef8232f41708ed7f5e75a36979ed81b56ffdfd220fd7dfbff8a","ssdeep":"96:XUQ1xUQ1O0+ZTB7b57k7Bsqu7Bb7B47BB7B8P7Bb7Bj27BZ67B47BY7BN97B07BN:f1B1O1FizR1JJ6KUQgx485OGkRPb","tlshash":"9c02a6621bde507ce22bc072a3d6bb4ef328a342da360559e85e161bd6c736532f1709","first_seen":"2026-07-07T14:39:32.442337Z","last_seen":"2026-09-08T18:10:54.380857Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/api/v1/init","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.279Z","timestamp":1788891026279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"POST /api/v1/init HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 162\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 98\r\nx-ratelimit-reset: 1788891026\r\nx-request-id: 2923567fe0ef252d\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2OgBCgN6RXNvblFPW1oAIw9Zk3a1WOzOg8ZgO7UX%2FqhY5OP6my%2B5N747VKKLv6bdZxWC3LB%2BjBQRdXaYOEZAkj40d3HF7UUUmMNgli01x%2BEdCZg9Q8soSgfEJ9bPnLM1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f24dc7d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":1208,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b625e480681a557babdb125bc0d9227e","sha1":"a47be999f35cfefa9582c7f946a0963010751140","sha256":"87644b5406575f3baf082a89665dc4b8d3faf42afb7bbfde0b6af12235119cbb","sha512":"1f5191acf6aea2f7fde3d204faeb03193c847e322f05bdc4da8afafb39382e326e4b0807e3c4378adbf24d8e4b8000863b4ec89b240c2bcdca8102d6f418432d","ssdeep":"","tlshash":"cec0c0132218c1030371400b25cb920083482212f410ccfcc858de01c71c050974143d","first_seen":"2026-09-08T18:10:54.382802Z","last_seen":"2026-09-08T18:10:54.382802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Search-y-qrclh-.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.310Z","timestamp":1788891026310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Search-y-qrclh-.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 32f0ca35a0c13941\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoT0IMEItUC3vOfxpIBmTy7usHfGgnUCxg%2BANN1JR0dhJqZPILSTec7h9%2BchVejKbrYXpR9r22Fkwt8kEEPO0jUjSg4UFzgKjS%2Bp9kn3DTn%2BB%2BM0HX2VAdLl0YUwdWH0Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f27e9bd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":6858,"size_decoded":3681,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (6807), with no line terminators","md5":"163f24c8fd5c1a7d5b6b968d6c99106e","sha1":"89c40c6a33c7970e920b57ac520d429e3757cd78","sha256":"696cbeed748abc139c4b8f1868d46a00fcc38b983d603fd24e0908b6ae97c3a8","sha512":"09e74683ed662a73790fddd38d99f1c3df5e0874109ea000e7acc0898c25327c23cb927eb1afe93e235b9a015c86f27f89055b651658e0564b11318ae731e2d7","ssdeep":"96:L0woR5bi8lCVhW0HGb6NyGMcSB+16dX9hUkgPRSwDpKqC:L43lwjgEgd3UkgPswdKqC","tlshash":"8ae1400abd7480bb0d9352e18943c6327045ffa5f258e59d7dfc86682bc9aa8f70d50e","first_seen":"2026-07-07T14:39:32.45175Z","last_seen":"2026-09-08T18:10:54.384845Z","times_seen":13,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:27.032Z","timestamp":1788891027032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 18:32:14 GMT\r\nexpires: Thu, 02 Sep 2027 18:32:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517093\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-08T23:46:39.477558Z","times_seen":289661,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":21,"connect":24,"send":0,"wait":14,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/avion-bccNP09A.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.862Z","timestamp":1788891040862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/avion-bccNP09A.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:42 GMT\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 8946b9ced3322df2\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZ7Ck10juBdEW%2F2DasVaUM7wt3rpaGV5aaKOF32uiTyZFkmVPVADTv%2Bby8wjVD32tEUel4QmdCPyUfHd%2BkqN2ltCQ5Bq%2FxpkiJyqfbJHarGUxrIONEx1Aq%2FUzoajV0xu2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d6f48d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6710,"size_decoded":4087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ff2258abf79353268adaf9e6cc67721","sha1":"23a53fc185b1418787ed230b78049c674d732b7c","sha256":"689f87d390004442cbd3c6b9a88ba08cb7342baa2d95bc6bba976d936175848d","sha512":"52e2acf712728f398a0aa17684a594c4cc17ea3ea537fa2af26a736358bb8eb5f98ffd2b3bfb8c4704b1620951063d863c2d52092d138ec7247bdbb467ef57aa","ssdeep":"96:TxIBnuLHSW4bSYHBS2heU3DcKTqvmMFjG4GDLsNxG05g5vq1d1FZpV/S7:TxIBW0ZS2r34Kq/pg4r5P7/Zo","tlshash":"9dd19af557dca2f0a187eba4cc225959b66738fe3f56dbd582c4a5a4aa21090c4ccc84","first_seen":"2025-10-18T22:41:30.266309Z","last_seen":"2026-09-08T18:10:54.387934Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/index-Dvqr6zIA.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.538Z","timestamp":1788891010538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/index-Dvqr6zIA.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: f93c75030fe8011f\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaXxpgfwEIcmVEclFmubkP0MDg%2BT6ZNPCL4YtIFQ8gnr%2B2tzSguewBkl8uVlWzUNyAhhoJQL0V3YChgrs%2BYyo242e%2Bcx1TOFfBmeL9uRg3x1x5w5M%2F9EfpTav5SYpOf6Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88febfed90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84205,"size_decoded":23602,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52071)","md5":"df2a2bb02278d3350bd8a07c2942f43c","sha1":"19624bb79fece6351639a814f0239fd752df8bf3","sha256":"2bc97edbd4bd0ee8f1f1c3d1b1a3ad3671f73ef802933b58206cb921ac1e2482","sha512":"166ce0d7367976cee4f1d800e2d90ed7cc78fdf25723bd7f2142c868fcc9f94e05db2cca855bc28a4aeb1b6ab5b2b868aa3326fd31567a97c29dd1647a9489fc","ssdeep":"1536:ouBQv+XG4NkX2KMyWo+esbwQ+esbwUAp0Ute0JFAcpuIVjcOd:A+XKQe3le3RhPpFiOd","tlshash":"32835dc7664520321bd38f1ef0d2721ee2f69d26ce4ae93068d3932522d5845d7bfab4","first_seen":"2026-07-07T14:39:32.418822Z","last_seen":"2026-09-08T18:10:54.389685Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.987Z","timestamp":1788891026987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:27 GMT\r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2591,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-09-08T23:08:13.272439Z","times_seen":2934,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:27.036Z","timestamp":1788891027036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 18:32:14 GMT\r\nexpires: Thu, 02 Sep 2027 18:32:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517093\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-08T23:46:39.477558Z","times_seen":289661,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/pension-DA6uy8ZL.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.869Z","timestamp":1788891040869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/pension-DA6uy8ZL.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1872\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: df7494d7e3ba8b67\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdhDvYDcaXwcWGzapf9ogly%2BYiWRztw4Jb5ET26gdl4ptVmU%2B%2B0xtHUiEqmFW5M%2FCgQHr%2B6ajBshOGq2PWzzwFDRXxk7g%2FpwalORCmTdxtmmaz9e0xGlRRo74StNN%2BICSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f66d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4459,"size_decoded":2907,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ba37bf9e232eb3b22c63af1ed2aafce","sha1":"2b189722f921620e4d12ef6e110f9213e9e707d8","sha256":"7186f4f99ebd88b987e97de1d9e6c7c50e94cc2a5bc29fa5f8dd807f25a4c8e4","sha512":"09f8481e05cd453ead0dbe3907ec1316cf6f57c0219d404d9510628e4ac3142569099e9be237ca00f9d2c746d427eac5e56c37fe248005e37b2f56f9064f7bae","ssdeep":"96:wGrQmuqOsr7JTPzUbvfrJUXeiMlCoXkJOsdJEUk+vVBbcAD/Pq0J:wvmesHJPobvGejlCoUJOsdJhk+vVBbph","tlshash":"129192f16598b2d41503dbb4cc259be23daf2cbdbbd69b94419079d559222fac88ccc0","first_seen":"2025-10-18T22:41:30.407644Z","last_seen":"2026-09-08T18:10:54.393442Z","times_seen":17,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/hero_actividad-pLVGvflQ.png","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.870Z","timestamp":1788891040870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/hero_actividad-pLVGvflQ.png HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3624473\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: cee7a3c9945bdd3f\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KH5L7Qjo3zNIHhoDC44AOybTu1UT%2FnI1USgnk%2FU5lP8haowptFkXDxhZ4HJIPXCDHrzSPYWYrG%2FpgxuwMluFmcS3Xr9brhMVkpVpfHNuRpPQco6TJRuNvQ4Wg91wno%2BdsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f68d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/beneficio_cashback-QsFgPtCt.png","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.871Z","timestamp":1788891040871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/beneficio_cashback-QsFgPtCt.png HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3480486\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a11c4cb5e708dc57\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQo4Z%2B7Gq712dgx2vNVe%2BrLsET53KDsRrDaQQXFsEuFjlw%2B7dX03RuYKaG7KwcW%2FCORzc4cGR1pOUcRBDvMFm5BEKY9kNKag1yJnlKfjHx7Hy7qj%2BooD81TyJj7Jqcn32A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f75d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://bac-vnqern.com/api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891043\u0026sign=6347fbee6cbbf274d7706ecb0a529f4f","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:43.381Z","timestamp":1788891043381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891043\u0026sign=6347fbee6cbbf274d7706ecb0a529f4f HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bac-vnqern.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Wr0xuM14wTmL0zPLZIBiPw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 08 Sep 2026 18:10:44 GMT\r\nConnection: upgrade\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nSec-WebSocket-Accept: vqHxZM5DsAYn5e/cmvrh8ZiMWY8=\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nUpgrade: websocket\r\nX-Content-Type-Options: nosniff\r\nX-Xss-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0B8A%2FOpuM7mUmpHZJviG%2FCj1e%2BwtAVENHQXCa99raXEfIg6vl5Arv3owpuDZfoSFT47Jfj6GrUE27WL35%2FgzrZ%2F5Pmpy%2FHUp8oM%2BEbILvE5GfqS2WJxr9Pf0W1v9tKBfg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a37fe95d8cb3805c-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":794,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":712,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Spinner-DHhgAQw3.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.319Z","timestamp":1788891026319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Spinner-DHhgAQw3.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 541\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 705216078130032a\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5yohUqDMXyjn1VA1%2F%2FImGgoh0cQJd8vHmzU2%2F83owJNxYQtCdTfmAK%2BBzAOTQpKgvXh2sQdOJC2l1%2FjjD%2BFg3vZMXmG8A%2FgItA927%2BrC81pKwnf050pONwCo20bqfoQ4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f28ed1d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1597,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"c26d9f0a53f00db2d003bea214342b60","sha1":"d6878d01bde54f422f4649e07ff446f306d42f6c","sha256":"374f296a1af79d2527c5860ef6f32542a066c6a867633acab63a551c16697dc7","sha512":"01d83bce7085eccbeffe4ecbee2c2c9ede4af65f950917e130f3e58b5f31edd0a41adaafd6047129ec654ffed6b90a84e302c114cda4053ef222ad7ed440e24c","ssdeep":"","tlshash":"d9110cdf98bccaf448ff0a142352516420a47b18fa34686026fd43b92b198f4f22ff48","first_seen":"2026-07-07T14:39:32.435771Z","last_seen":"2026-09-08T18:10:54.394928Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:27.037Z","timestamp":1788891027037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 18:32:14 GMT\r\nexpires: Thu, 02 Sep 2027 18:32:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517093\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-08T23:46:39.477558Z","times_seen":289661,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":15,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Default-BckxisMO.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.306Z","timestamp":1788891026306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Default-BckxisMO.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 57aebc54c647137f\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAIq%2FmmC3HcI%2FqmZI5cQNlJiWX6ienfXsMstiWbwpoXcBTFNAKVx4RkdqVehaSZ3kIJaccn9WpvtKLMJjQMv7%2FLWCLp1QPPAQ42nrxntOgNwteM%2Fo6fieuIvPYDnptNLAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f27e68d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":276380,"size_decoded":62135,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65490), with no line terminators","md5":"ea7b4686070e70fc26e073c0b03e6d37","sha1":"feec43539368b924e3eb5e74a6a7b478e170d070","sha256":"0f4c2880e1fc9e28b0b641c745d0e7920f870943f80202ffa3d125f6a03e13b8","sha512":"fbdbbaee43af7b376e1a89f7f094fdc9733e32933eb1db11ea0465dd17993fab230f0eb14a98aa667f6f21d332b1c104c599a74ba5aca0a0b67d679f19ff83a6","ssdeep":"1536:AV41jm7GhacaPPXGrqwlWOeS56jvuNZy1VJCMaM4m4yZyvw4fxYCM8ZqVvICML3w:Axoz+yrx3picY5D","tlshash":"604475fe254428dcf137ca5314213658f03232bfeea98c49fef6a158ed76451a5d8a38","first_seen":"2026-07-07T14:39:32.45684Z","last_seen":"2026-09-08T18:10:54.396186Z","times_seen":13,"resource_available":true,"data":null}},"time_used":2404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2121,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Default-DvLlvQBC.css","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.307Z","timestamp":1788891026307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Default-DvLlvQBC.css HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a6311090964150cb\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaXA%2F6PTJuh4vDPYuIYeWKn6blSggF97mYHqSIFK3aEkX9myII5EcP3V0syxuSKFaTThIWBUFHbxr7CVtGQJ3m4LpQAnevLSg2B6jXkM1RcBidI2xqSPStNdCUniO0oO8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f27e77d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700584,"size_decoded":509061,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4adb9c27a677a3787a4898ba3c761d6b","sha1":"21c5cd33563247eee1573764f4d6f7db89d9bc35","sha256":"907bfbd9a9c154b6e1dccdbe0b9cbe2a0c1ca13cc1b10673b8321ba6d2447da4","sha512":"7672d8626aa6cc46a9e3145d58a54e9d6b545f114939132a01c90c8c0bd29567b3b80b04281e3e5f0bbee1bca7012b001bb85a077d3d845a62a9cd4fe96d01f2","ssdeep":"12288:e58jit4RnBaTwOujY0Je1sBzrqFa4O41y6:e58q4JBFOujY0Nr1ay6","tlshash":"f3252973325c11aa6327d32bb698b65e2e20bf23df65959fdf05c65e4e831e32131488","first_seen":"2026-07-07T14:39:32.446472Z","last_seen":"2026-09-08T18:10:54.398542Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1671,"receive":12738,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:27.033Z","timestamp":1788891027033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 18:32:14 GMT\r\nexpires: Thu, 02 Sep 2027 18:32:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517093\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-08T23:46:39.477558Z","times_seen":289661,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":27,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.885Z","timestamp":1788891040885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 00:55:25 GMT\r\nexpires: Wed, 08 Sep 2027 00:55:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 62115\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-08T23:43:25.446633Z","times_seen":24141,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/theme-SXcDfIpf.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.545Z","timestamp":1788891010545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/theme-SXcDfIpf.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: bfba884a300c06ce\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjCOCgrr60XbiEfkBRaL1gQyCZf2sKNYVnMABOkWcRygTy6vsvXAe6fgXrRtnIJmTbwZitE1pOrzy1ZrsdbDEVATLorR2%2B4LPOvhtgs1liVX5CDoSfbzQyJVOwFX06zowg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88ffc1ad90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25988,"size_decoded":11346,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21242)","md5":"01f2f2080f8dc114e363b054f37d82c0","sha1":"d3439f26d5579550672d747366cf2f1ca5444b61","sha256":"086e0279b3dc6a79b99cd8f0051744da1f457c400b4faf32f0c9c0b74856c804","sha512":"d0bb304377fadd9af0a190c0c46b077dae137d82c2368d8b334b38513a2142be699c3a87702bd954e0aa3b89f2a8dd187fc877fcecd3e9b45921061fd1910037","ssdeep":"384:TYP3uGdBJ0CR3KY/nPibQ3f/PpsYfc+gpZo+GBeq4TqKcmAG/6Ui41x0NxmK6:TmdBJ39KY/nzHPpDf1iZFTrEA","tlshash":"23c20ae973c6b0b387fb407540bbc107f3ad66a098095508f095b29a3535d2a62fbf76","first_seen":"2026-07-07T14:39:32.429275Z","last_seen":"2026-09-08T18:10:54.401267Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1004,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:12.585Z","timestamp":1788891012585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:12 GMT\r\ndate: Tue, 08 Sep 2026 18:10:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-09-08T23:32:09.616446Z","times_seen":21698,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/favicon.ico","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:17.963Z","timestamp":1788891017963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:17 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 107975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2bWETlgqksXMxFwvCyqqDtNT6qP%2FXR%2FWmzzhukH3w39zwUunnzpDTqljtY0fIUOn6gn3pHSx9y9TSvvnsKElDBRtIXkr4sIzdFh3rY9pqqR%2FcAJay%2BZv1bFLW21XXColw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"djl6f49tzs6hopy\"\r\ncontent-encoding: zstd\r\ncf-ray: a37fe8be5b6ad90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32038,"size_decoded":6739,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"46be09a25db2a1ca3a2bfa7ddd53156b","sha1":"a63d86c44dee9036667be16ef51f7570ca59058b","sha256":"ce10869dd392ab72fb06a38620d5428b3281c23227dc5c158217b9a12b4f1663","sha512":"e8f73b4da0150ac1180634402160ba25e0c13fbbfea5befa174aa720f9fed21f17e8a86b581d75eb80cc56b311903d398bce67594f4e04d2fb848440aa6046a8","ssdeep":"384:sjrzdWt9S111111111L1111111J2NTSvYpLVKtJ6rsskT4NwSVh054ygaal:gI7qYzQmsfEWSNAA","tlshash":"99e25f04a249d141cc262fbfd80196fe017c4ec1e7936a63ad93fece3ff6a490494665","first_seen":"2023-11-30T03:35:50Z","last_seen":"2026-09-08T18:10:54.405121Z","times_seen":35,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Sostenibilidad-ChPgzT1X.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.854Z","timestamp":1788891040854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Sostenibilidad-ChPgzT1X.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1774\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: d30219426beffd7d\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fN7E1NVfoD6pHUJzhtF40KMFauEkz0HzOO8Q32Nuo0E3X6diyjLzutBK84IyGm3Pa3s7C7oUnVqXt4xcrVWYjLM18ywSesdX0FRQm3OpEiBgyhL6fbufv9JinOoF%2B%2BYwaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d6f1ed90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4467,"size_decoded":2799,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d218da86cdb9717a910ea1d09187c714","sha1":"6be3c466a5eec50205c9193a1c2d0beeec2384b4","sha256":"c1f63d3816282abd0d3b2a4cf0384dfd85800b9d58ea957accd102c43bef6395","sha512":"668ae3939293d5ab8e02e9044e3017865aee66a7e87f697ba39fb5a6124a8fb6673ba185ed0a8bbe3da145ad8e71694ad6ef733b770e707ad3593e955a35c2d5","ssdeep":"96:nVUuEaBM+PAXaqjVoLr/G0mGxmFI+COGyOuruF+xgcU4oUsraVcqz:nVpTq+/KVo+0mGgFIDPZsgzbBrGcqz","tlshash":"e491139ee3cdf2c0e887a3f0c93569b1b16f347b1b01c76846b59ea0aa151ad808dd90","first_seen":"2025-10-18T22:41:30.414295Z","last_seen":"2026-09-08T18:10:54.406229Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/beneficio_millas-DPBhAocm.png","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.872Z","timestamp":1788891040872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/beneficio_millas-DPBhAocm.png HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4160490\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 34fbdaefa31cc718\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cephdGj2Njc0of8tx%2BbyivSkcaMW3zp35l7OOwKHzJT0NkbApJcRL0CA2gAcBz%2Bjf06loIa%2B8LFXZ8sArn%2F%2BbTSL1ch83LHKQd%2FrDA1Li0U8lbCTI%2BXptK706m%2BgSsvGVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f7ed90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:12.582Z","timestamp":1788891012582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:12 GMT\r\ndate: Tue, 08 Sep 2026 18:10:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":1272,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"818d326c6825eeba3027e424fee242ca","sha1":"ca79a5a9ccc0bde258f8f716f5661f13303a8c00","sha256":"920f031c14bc238f66ebadfb908217817f60ddb12d8e10e35e9177c28cc396d5","sha512":"b6b059867352e9548270c98a77f8ac2c211fd6d35440f7f2990041d7ba4767038ffcf1fd5dbf85fd0f2a0dab79b04605b3a00cd41ea14b35427e44ebe71518be","ssdeep":"","tlshash":"db61b4a0092f9640ea831dc663cf3e3a9e5e51a5705584f99ffd0858ec69c2a73b1b1c","first_seen":"2025-09-14T00:39:00.512778Z","last_seen":"2026-09-08T18:10:54.407679Z","times_seen":2082,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Graphik-Semibold-Web-CRjqjtYx.woff","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.884Z","timestamp":1788891040884,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /assets/Graphik-Semibold-Web-CRjqjtYx.woff HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Spinner-DQD3xNDm.css","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.321Z","timestamp":1788891026321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Spinner-DQD3xNDm.css HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 729\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 46672e36c7ea5a74\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WITaqgSo84fj1zafsg81nTKVcC%2B5I%2F3WPDfPdeF8mWVQ7oEbjrcqz1pvgHL57ddZTP%2BUuDYxAU8jU6gqH%2B2mJPv2VpO7WQLLt8ScLBAeDdvJq3JcEht0lJecbC%2F7roEcpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f28ed4d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1741,"size_decoded":1772,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1740)","md5":"b55a020c51f0b67f9a960e9a7ced8743","sha1":"a5b842f1723b70e7208c3b38a857436881ef54aa","sha256":"cfad43111c04b380106dfbe0da276471a4bffcc272894faae7ba7169723b4f1e","sha512":"f75def808d6947908d4ab2680e4109ed7bac845e0cc7f545718dbfd2e1a1c7313ab01b89e0d37b017a8ca120e741a7ed9e21b673cabb4f5280f42a27f29a04db","ssdeep":"","tlshash":"60310340f9cc5325b13fc174a8fc27605864ba03a3e1eabb6840306dda46c6627f76d4","first_seen":"2026-07-07T14:39:32.431639Z","last_seen":"2026-09-08T18:10:54.41033Z","times_seen":13,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/api/v1/config","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.627Z","timestamp":1788891026627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /api/v1/config HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 115\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 97\r\nx-ratelimit-reset: 1788891086\r\nx-request-id: 0f8adb7a45b5fe76\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRAkn%2BOfrUNNky0SG5TQWvW4Mehze4kO8HAmfGhpel3W6%2BouwWFPUl%2Fs8mAqP3pmxGz0%2Fz9FSIRUUGC3lKGksLgSUFQxCiKH1CaNGJNV7F3CFT5XQXl%2B3SlMCbqw4zZFvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f47f00d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":1131,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f0006e3466073b0df3ca0e2a7874dbd9","sha1":"0a06f7d10eb7fc74a1f4e58b97cb16006777f86c","sha256":"bbe4d7e48e6ea5026e5e501967a468b07867c7994f6d8e18ee821775c7a22565","sha512":"6c5abf5d05e107441a187b927d744c7258e24c5a9014a7e917d433db23be24dd24e1b02e7ae2cc780b27f0e7196a40c31981e3eb337815e87b5e633c69560fc3","ssdeep":"","tlshash":"a0b012461bb815264e91820a944a1790020fb105990105fa48c83e05860c0eab210078","first_seen":"2026-09-08T18:10:54.412876Z","last_seen":"2026-09-08T18:10:54.412876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Graphik-Medium-Web-Dlyr4n9s.woff","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.881Z","timestamp":1788891040881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Graphik-Medium-Web-Dlyr4n9s.woff HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: font/woff\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a04d9464eb490635\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BXpGuqDEaQXrxbivgX7e4yzceI5%2Bq3GNmkVnOmDXGBBqMlX6lXOMDU2aku%2BjU%2FI7hG0Pd%2FXTu6Jt4pGTJlmPq8kLmNA681IrvErVoUSXfssCAA%2BP7LHsN8N9eoQza9eGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe94d8fafd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44807,"size_decoded":45797,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 44807, version 0.0","md5":"8427089bf7cb285949ed6f9047cb11c8","sha1":"0439925aa8677dbd9a67001cfd0364abb9ce1d95","sha256":"3754e5acc929abc696e616b11fb689afc79900bcede078313c9ca9ccc42e270e","sha512":"fc1b9dab67cec0e189f24dd4fd4270af471e8bd1d5298e5422c501c888de519c8263452f726361fe73501a1472aef483332d585d7425fd0eacc3372de36d11b0","ssdeep":"768:SKiW4A38zR4WEwwjxNOpc84x75Oc2E0eT134qW02o63B3oCt6TKT4Vu5qMC3:eWfAWRNoc840E0ei/VoCoTKTMuAMC3","tlshash":"da13f177dcc2a477b8729eb071ec42ba2516397929b9da04bbec0c3cb135476c3464d5","first_seen":"2025-10-18T22:41:29.651621Z","last_seen":"2026-09-08T18:10:54.417489Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":1235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/user-CmIh8JBi.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.544Z","timestamp":1788891010544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/user-CmIh8JBi.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 94372d2bd33a175b\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtmglrZ64w%2BTHPhuRC97XEWow2pwDm5TLuU3IR1a44JfLPzt8vMheC%2FhoHKZBQrOUFKhC09cuurPdFPzLBNDajzY4nLPNNGaXTOw1qbgw2aB5UXETngKd0Q6rbRy0akn5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88ffc15d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118701,"size_decoded":43701,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29730)","md5":"064323899aa91b3c05a26d03991c787b","sha1":"c2413116dae9a0994b8e157c37611cb7601e6655","sha256":"2bf45f91b04a67dab988fc6f53e18f3b380759ff3b69f8896661efac14cef82a","sha512":"325305d04650acc1b9abbc350a84a36a40eff10d341ed9b1f49a9c27203f578e0921c30f1358a056d419cfcc1d73b168578d77e12ddaab91ce2e87aac7465a99","ssdeep":"1536:K8l8HhNb0VWcfKACMWYJFRSHKh/8p4Maz8pPtNPU9ArHMHm:K8l8jbQf9LWYe6Dm","tlshash":"53c36cd53684b05153ab64e1407f240af23b6937490d4568b190ecef6cbd98e92bfe3e","first_seen":"2026-07-07T14:39:32.440516Z","last_seen":"2026-09-08T18:10:54.418803Z","times_seen":13,"resource_available":true,"data":null}},"time_used":15660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13989,"receive":1671,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/index-B4UG-4oq.css","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.554Z","timestamp":1788891010554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/index-B4UG-4oq.css HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 1bb1d89c2b3e7ede\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnKu04%2Bb8pW%2FC17JFwQHD%2BbIEO6lRz1uaslE3adUmt8XPKPGadQsxttLwpxCVzmPU45xFRHEPEMiSNuXMUkHFI8FCmaFLrDDjfV9pfXw7Myvmji9V9IQ3CVTyGKjB4ztNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8900c44d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576718,"size_decoded":85277,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62440), with no line terminators","md5":"4d9bb8f93a4f9ee8e910bbf672a36c7d","sha1":"1649be179fc0bb29b6eb13129ab40e3647020667","sha256":"4a842aef4c883124671109deb5a9a6cce410aa14f3d7744ffd2b2509aeee256f","sha512":"0ec2a34e3af81c455aa09f2be93f7658d3c73d2d3691b9e699cbf4beb1fc71c628bb08dbc3ff9e566c8760a61220aff9a1e0dc2755586d7e2e0fef9af34460dd","ssdeep":"6144:e9VpkrKZ3zQvrxrOvkBzWCKe9XjOM17lLNdyyw5wfkbARfTU9BFEL1c0muJW5:iHZMvtrOcXXjp17rcuJW5","tlshash":"e6c455e2f18900c6a327d117c390b7be682ff5b1c6095c56fa1b672d5ac36a711c2e2d","first_seen":"2026-07-07T14:39:32.423844Z","last_seen":"2026-09-08T18:10:54.419713Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2773,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/beneficio_millas-CNn4ELmG.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.313Z","timestamp":1788891026313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/beneficio_millas-CNn4ELmG.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 110\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a609893170e4a514\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29WS9LFuLCD%2F6PNa%2BmGNFQxyGSQleYNkKvKQ3R5Pt2VVbM6XQ7M2g09MyjLe4Urls3738qe8mhjwqH5SeZdIBnEu6AMDTD74Kiu3MET00tbkNNyyH2v4bD0Ocwauchtpbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f28eb2d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107,"size_decoded":1154,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"251eeeed330b28b2a55a6820004e96ac","sha1":"9f236e1077e6ee441dd5c9547c934383059a4101","sha256":"bbedae555cfd41cf5cf612db8aed1f54a364d220fa4e2c6fdb20df43846fb5a8","sha512":"0434b7705ad0b0711581b7869bfbcdac4fa7370e9bc0f06241bf9d050742212c0450badbc41e381529619073bc38aa51f63a6da20a6316d49d9dade9b1bc76fd","ssdeep":"","tlshash":"8ab09246836202a1a00a18408086aaa54908a306836a836b1014b128f252a990970e72","first_seen":"2026-07-07T14:39:32.454136Z","last_seen":"2026-09-08T18:10:54.421491Z","times_seen":13,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/_plugin-vue_export-helper-CP0Mzsxd.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.542Z","timestamp":1788891010542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-CP0Mzsxd.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 70e2921946069421\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09MNQyeLi7RxYf1YslGDqMFi2cbe0quDzroQX8ZVeKC7R4XVCBRMiQg0pjFVn9hMkrS1dYl3oIH3Z7Y%2BUDu7qjwlCrSxJOV2DC9%2FYK1tJToD6GdlYtSwTUOApvcuDclGCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88fec0dd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109668,"size_decoded":42802,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37182)","md5":"37fc320f214ca96be81545b3c4d51088","sha1":"1f79740c3244fb5df9833e0769f1c6bd7ca0e202","sha256":"10e98efc2f2946c1822626f7ea1ecac60ea804b183cefaf2992b8e9e3cf9412a","sha512":"fd836bb7b4536978dd53030c52befa4c6cba1cb017e3d31f2404a18a6bf43b884d55916c388367d43ca01095ee38638de7aa432308440a1d32294ed2cb7586bd","ssdeep":"1536:zW9XrxPeVnd+TXT2ix1k/2Ec4IA2wBKu0Rds5S6GZ6VxCA:67Bepd+TXT2c1k/dou0RdeS6GUVxCA","tlshash":"76b307f93382b57253ae41f7807b4042f3ae24991c4d152cb164a8df367a858a1fbf79","first_seen":"2026-07-07T14:39:32.430222Z","last_seen":"2026-09-08T18:10:54.422757Z","times_seen":13,"resource_available":true,"data":null}},"time_used":6207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5958,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/webfontloader-D54F7-u-.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.250Z","timestamp":1788891026250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/webfontloader-D54F7-u-.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a83933bf9988cae4\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xi0g0JrzQlDxop4R5R6xFjTg%2BVmvaA8JMfQGdiRaz9mBF5sy2n4ZrElJ%2Bfnm1OHZ5jvD2r%2BFcqx5mcvy%2BRbRWorAWDQLxdOZo1aOPgX2muESt9V0IHmK%2B9jOLIgGhtdSmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f21cdbd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12270,"size_decoded":5982,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12247), with no line terminators","md5":"f6607bd1a5bde70c9e4340c900cc9d59","sha1":"6d912aed7cc53dfe600f65dac7300bacd966336c","sha256":"1675357ed5f9401a8bfccd7ce90b58d10f4d20374c6f13eb5d10d2f756e3ef6f","sha512":"d8596b3ec174dc9a0d7b8f204b3ac3e2e4c5b2c19f04a162f75de2009aedcc4c6f7f4057f3096f6e9a3c45daa521dcc1736a8e1e8ffe1b6474ad27975bf8343d","ssdeep":"192:3Qt95jSh9fxaC+l2LQ4ovBL1u/1dz1a0TP/Rj2K3182KMat2+roRO:3Q75jSrfxaC+l2LxovBL1q17aGwK319W","tlshash":"fa42c7e97b80b0bd935310b3025f550b5632796e2c09c5ac7668f5e1ac749ba132ffb8","first_seen":"2026-07-02T22:11:17.557463Z","last_seen":"2026-09-08T18:10:54.425285Z","times_seen":15,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Graphik-Regular-Web-DVpIun2x.woff","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.880Z","timestamp":1788891040880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Graphik-Regular-Web-DVpIun2x.woff HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/assets/Default-DvLlvQBC.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: font/woff\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 487510c3948201c1\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6vmlCkBPJteOEC3N2iX1iomheHrOfqrfljPcTCc6GQ7vQY8a8MSo7sazB%2BB75v7R0f4%2B%2BNVZTbekwsnZAfOEtopciUINY3vdY3FsUQRmOCqiL8VyzZpKgqhRdC5Q4gpyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe94d8fabd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41307,"size_decoded":42219,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41307, version 0.0","md5":"321d0127ac2e26f50cb00d3427f4cc21","sha1":"73d6c479d7b3a999a6cb8940b362746949f179c1","sha256":"5fc2b8106378f7fcd930ffe16c840b18a9a4731663ded6815093bf4258b4b796","sha512":"d013cc04de95e088e46b04da1b66009916699fe079cf067cf4b9bea23d80757e39e647bd4b33bb4d79e355670fa45934655e37e3559a2b054cacece72a10e1e1","ssdeep":"768:xTyVeA7qo6JzLPSUkbXPodLMHgvk7B1272l+f0YL3NvqyV260t3AMYNSuRMtIJS:GqsPom2ggyM0YtXV2LhALNSmMGJS","tlshash":"d903f1326a416b52b1d2bbf833d94b20e2199b1c907fb431a27afb98701052cd6dd692","first_seen":"2025-10-18T22:41:30.172373Z","last_seen":"2026-09-08T18:10:54.426507Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1122,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:12.583Z","timestamp":1788891012583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:12 GMT\r\ndate: Tue, 08 Sep 2026 18:10:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":1594,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-09-08T23:44:12.919085Z","times_seen":51683,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Trabaje%20con%20nosotros-B6aaTKtl.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.856Z","timestamp":1788891040856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Trabaje%20con%20nosotros-B6aaTKtl.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2014\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 07a024fb91180b82\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSwfgIaDQRDlCpjbgDhpfEd6zyGn2ZNexSyMTNegXnvbXEO71sQ8aGC2bTKeZOAIMmzw6KYBVWX3nZ6mwNOcOgMQ8rqoAmbclTeNiciOtjjyJdktLtvq00J8Y68PTlyMVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d6f2ad90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5022,"size_decoded":3035,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47abd73a4d09340c8cf901ed9de42c40","sha1":"d53d4ba097e28573b3ec56664a620d19e0cde962","sha256":"7002b73876655681749f3e3e1226c00906f294d6ca9e2b981ddd25d8f929e99b","sha512":"0da53a9b7f88aff879e3301e186b27e0698051c31529d7824ffdbf1dca11879de093585be8fadb7a84659fa90f6bdc6757db2bc0865ebec4bae0c983b69cd295","ssdeep":"96:neaaiVNxa0znJ77H0J0xmZX8A3C34Yn0+XOIf6pX5n5TU/uCqTbbEQAnWUaQn3T:neapNxa0KamZMM/YnrVf6pJR3H3WWUa8","tlshash":"c4a184faa7c8d5c4984bebb1e823de68b52f3cbd3b47c7484181dd94ab10169810dc90","first_seen":"2025-10-18T22:41:30.252624Z","last_seen":"2026-09-08T18:10:54.429017Z","times_seen":19,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/bank-BN6WLRP9.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.858Z","timestamp":1788891040858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/bank-BN6WLRP9.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2005\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 6b72a31ffbe3501c\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWdJgXOW7%2Fhj96xSsIbh%2BDhsexG%2BtrsUNsRgdmdMIpIm04KLXnHSm8rpCesLVKTRR1rNwOuOMQdp49QhYTJiquWJyD%2B9TiDOWQ2zIWf8iqjyRmKMYVP1aqOdOcg80lHgYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d6f32d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5060,"size_decoded":3034,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce1ce636eecf7e202f66b053e44240bc","sha1":"e49c12abdddeba31a06798056f70fe6454b21573","sha256":"11522aeb6d4f30a93370a3b794c15ab6627d6e6d4f482f1b7949ce79e103278e","sha512":"bea14916b8d0580c08ce7c046985646186c1ca9a1226388589f4a1b021d28c88d5c521ce895c574d4cc9be9520752d9308d2a0622f1bd36a5150d61872170464","ssdeep":"96:zPVqdji4rMGvY7Am+FtIMOh6ZFiybfDkua9TMseCSS74Y8nnZuiW7m3bp:zUdjrZvY7vaaMO+FSuoTMHnnYiW70p","tlshash":"45a152f792d8e6d4aa07c3a8dc33696930e238fe6f86df891280a5e4e4020f4545ed55","first_seen":"2025-10-18T22:41:30.089505Z","last_seen":"2026-09-08T18:10:54.430435Z","times_seen":17,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/api/v1/init","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.276Z","timestamp":1788891026276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"POST /api/v1/init HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 163\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 99\r\nx-ratelimit-reset: 1788891086\r\nx-request-id: a71bfb854ca8c14e\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdc4il2krKmbXq9hNGQA5uG7YQvESXC6MtG5P4GVihQBPFqZsVWcJ%2BcBVZ8kzenQi5vUX2L7pwJXBxs7hcPLKLrsdlAab%2BxGVMo07ZRADZACg40FOPoZVJSVY3oB0m0Aqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f24d98d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177,"size_decoded":1205,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0462fc7bef45b9c9d0dee372feed1326","sha1":"059041408f4239f307653bb4e32c1fbe39ac10ab","sha256":"8d2ced06d0beb20e1b83f899193e6c62982806f7713b82473b93bb09fb6f6bf5","sha512":"d635a80be70713fb53d0bf13fe9fe23d3a24e0661cad86db521a66f0414d878b93d264323530740e6882dde733a8311026f6c22cd14a7ab61cfa4c921ea26f87","ssdeep":"","tlshash":"54c012925d6c824152924a6f66a51592e29ea060e820dded8884ed004fdc0d1a355575","first_seen":"2026-09-08T18:10:54.431697Z","last_seen":"2026-09-08T18:10:54.431697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/Search-C7KQeP0U.css","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.322Z","timestamp":1788891026322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/Search-C7KQeP0U.css HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2005\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: e1e6479a93383844\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QI7%2BgCoQmFL8QFXjat9ghQ7IR%2FGoGnFkSFFndaxU5Y4o3exntF%2BgTChqWPaV1wNZ7eaKBd9G0%2BcXXmzf8gB72PLXmmVWbfvRHrBIUw93iK0l8%2FyhV0tBcu0KzHwOYJbbxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f28edcd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9132,"size_decoded":3049,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9131)","md5":"6e8dc35ac28ccd6b08ecf0b7593bd0f1","sha1":"f0253b5257cf0e012da8cc6bbf738692acd9486e","sha256":"e595fcb2ecfcfbacd16873d6161af0e6ef56d5339d77c46b66a6480a4bf5d332","sha512":"edfe4d415a6a9dfc37dc63902c60c6836fc3f8397bc45c7da22c64278cd1765b7ba252fde98520e2c60a6991c41067ad85e703e57209c23a677b052eb78364b2","ssdeep":"96:ZT42NVYrehD2TRJXLR2TuKLZ+heKxLToPv2tBrMUTKpyT3ZOP9TRRj2XTZswbKrh:D31hDMbGrs3Br5KpNFuWw7hAlP","tlshash":"6e121222fa6c511afa77d091f991b7762005fa23c083e2edfd612528c8c7472776738a","first_seen":"2026-07-07T14:39:32.443951Z","last_seen":"2026-09-08T18:10:54.434074Z","times_seen":13,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://bac-vnqern.com/api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891026\u0026sign=a187e54added59f6c2af577dc71cee60","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.670Z","timestamp":1788891026670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /api/v1/ws?appid=18d36ae919582df5_9e9b4b7c_07a136f9\u0026ts=1788891026\u0026sign=a187e54added59f6c2af577dc71cee60 HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bac-vnqern.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mD/o7L+mZUnR74c5DRXz6A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 08 Sep 2026 18:10:30 GMT\r\nConnection: upgrade\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nSec-WebSocket-Accept: 4PVc3eAnSxrCfPWGk8dkdNBpPOQ=\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nUpgrade: websocket\r\nX-Content-Type-Options: nosniff\r\nX-Xss-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbqcrC37ny8LFeQxX%2B6Q2yVrRcmEBB5eNJ5PoOz5%2FH4RWOK9Lr9Svb3D9ASUvZl4x37wj31km4LoY99UG1ADGtjBTnfT6Mowt414g0Rz19M%2FTpnQB9T9sJoQk04TwjWsqQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a37fe90a9e1ed8d5-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":788,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":7746,"timings":{"blocked":0,"dns":3458,"connect":3473,"send":0,"wait":791,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:27.035Z","timestamp":1788891027035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 18:32:14 GMT\r\nexpires: Thu, 02 Sep 2027 18:32:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517093\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-08T23:46:39.477558Z","times_seen":289661,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":21,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/real-state-edificio-BrzdZd0U.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.866Z","timestamp":1788891040866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/real-state-edificio-BrzdZd0U.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1827\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: a1dc1066737e20eb\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BziTWllfyp93akk3P9fQLRd1l3vpmqP%2FyW%2BvCs9k%2Fon%2F7IkSNCQM19j8oWiyrsaei6WumaLdNA9qWLO0GCgvj7r8hx6q3orA%2B3MS5qzhv57KflVo4R70715Fwep%2BpnTaEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f56d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5258,"size_decoded":2860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d54d74e731d4e17676e6e1c1d12bf93a","sha1":"d3421dd6226aa1a9d5c46114627a920ba6e4d25a","sha256":"0af9a4280c18bab4a9a7ef306b89ba17b93f4d8e98a0b199a6392629b71eed46","sha512":"1cb125afd62b19289c62a8d81b8e0d91ddad7e4af772056058f687b227a39fc4f9a21e9a2ae8567756c41c4fa3ca5cc5b91c0617d1da7acdcf4f704ceb242f99","ssdeep":"96:noR0RStQkDOY/1nUiZFxgh46a8hS5qKQJlclKwX235V3R3FNHicJiSypb:noR5VH/CKgh461hSUKYhVHDf6b","tlshash":"adb104fa22d8a5c19a82b7f4cc19a7a5309734be2f71d74f0345b9a17b015ddcc8c895","first_seen":"2025-10-18T22:41:30.714336Z","last_seen":"2026-09-08T18:10:54.434825Z","times_seen":19,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/herramienta-pay-less-CGLJUQcO.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.867Z","timestamp":1788891040867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/herramienta-pay-less-CGLJUQcO.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:42 GMT\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: c9e7cf29862fc358\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7GK%2BzOkA8Q9kCB0jXflnH5TJQO7zssUALV16ofrylkzm0veLFXsZM9RRKS4oMMl7vl7%2FcF7dBDHvBNSyH7pALxIwHX2NujZlWI0%2BuAHfQ8zwzZ0yDpj%2B0qm1hxiIK%2BvMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f5dd90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4840,"size_decoded":3101,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"657c3826480e7b6b70b09062ec6fc924","sha1":"42735935c83d07049735ec7f8f26fd15a75e1126","sha256":"42c94387432d30e308e046e46d83b9af408ec37c5d5e397e4713f7610e6630c1","sha512":"d68788ad2a2de035e68a940d9cc13c6e466c85fccdcb49163de76876b4dd9195e74f7d4f53aa782fa7867ab2c09e3b1e9af4b23b7e010f9841eba62f5ac698fd","ssdeep":"96:nLrR6qDTIpboIRDVPpJ75JFa3vJARFOXu/kR:nfR6qHIpJDVPpF5ba3xPXucR","tlshash":"93a155e7a7d873d0650bebb0a822859379af2cf6bb7bcf9542409de4f21005958ccc90","first_seen":"2025-10-18T22:41:29.631747Z","last_seen":"2026-09-08T18:10:54.435556Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.883Z","timestamp":1788891040883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bac-vnqern.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 00:55:25 GMT\r\nexpires: Wed, 08 Sep 2027 00:55:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 62115\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-09-08T23:43:25.446633Z","times_seen":24141,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:13.902Z","timestamp":1788891013902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:10:13 GMT\r\ndate: Tue, 08 Sep 2026 18:10:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7458,"size_decoded":1388,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9f53a143922cbc972437c62cc91f7de","sha1":"036c28e8eb666674cba9a9404d3f2dee7f54bb97","sha256":"53389b5155555d356ab58fcae04421f58cf701bdf3a55b9dd89656c4fc81f839","sha512":"a978915d98f8d3b53917cc815e3a39d1a0c2c00b3225224d8e5d18145091107642f6434950566df79d6ae1b60e6a238a7fba7d575f4538978064d43223e64d6c","ssdeep":"96:hOEaGxOEaXFZ8OEaKG3+OEaHOEaDJc+u6OEaKNqOXaGxOXaXFZ8OXaKG3+OXaHOp:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCV","tlshash":"77f1dde1001a9404ea472cca73cfbe356d8ea1072085e5facbff19985daac76233475d","first_seen":"2025-09-17T00:40:37.807572Z","last_seen":"2026-09-08T18:10:54.436229Z","times_seen":576,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/superbancos-logo-D70hI9xP.png","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.873Z","timestamp":1788891040873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/superbancos-logo-D70hI9xP.png HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 11101\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 328a0adbcc13b6b0\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hxgLyfIdbYUEhHEmZt6L0Ae65VuT601DatijjydapumbBJCAt1bE24VJ2WrR49nq%2BItSISQ6wG7Xny1NtK3SMl%2B3l9ZZ1QaWp0%2BUJvEQnWia7IV0zVzJp0M%2BxQVAN2K6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d8f89d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11101,"size_decoded":12086,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, interlaced","md5":"21ca3e2cbf904cb5ac7ae5e32173400a","sha1":"3ec1519facbf9d63a55f6f982f0dde12300b8ddd","sha256":"569504bcd89bf946bcf25a97493ac8d522b8cb550ee54b03fa9815162e7bbf3c","sha512":"9092c648d5bbf935130ef5d41a8897b940e877b828569484ea8f79d8dc719a7169afc21683fe8328bbe5db4755d5b44003ae4e2e2d3c26cc7039ff02ef85d8b1","ssdeep":"192:2d5hOk1OpnlrkuMi5eutqhS/oIswUEa+wxWZFigSxC8OI27uzsJsIdXSCPG7fI+:2ROk1gxMi5eutUSQIs3Q+WfVd8TaFPG/","tlshash":"bc32cf5176397cb4ac14b7ca312a9f3259bd1302dfbb1fe3730c424b5a2099d11e1821","first_seen":"2026-04-03T06:18:57.745807Z","last_seen":"2026-09-08T18:10:54.438903Z","times_seen":27,"resource_available":false,"data":null}},"time_used":4510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3978,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/bolsa-dinero-Dw12vcRS.svg","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:40.868Z","timestamp":1788891040868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/bolsa-dinero-Dw12vcRS.svg HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/search\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1609\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 13c5126cf3879913\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygnxxVy7AY1Kia%2FRpyP2xzSVPlXyzxmP0wpXW%2B%2Bl9ijkO5868ea7t8NA7qBqpxLQ03NR%2B1hIFBIFoHDJTxvAysWyciTcMcQcHcqqmx9jruqfry2Pc9xc0cb0ZwMmy5RD1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a37fe94d7f62d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4288,"size_decoded":2638,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1018e96b0357c46ce9f6e1558151056","sha1":"dc1ff8dcd48da130dbbb5e68b1d402f3d49984f3","sha256":"c81fdee7a0fec5b2188749187a4beba96e36b1f46a01ed7ca3fec736e3f306ab","sha512":"e013d8c186ce2b601562a5a1bbf3c4158423a5acd6ee2b02e7af1146a86d51d9a2c79039830fb708f4e7c6382a8f8b2b04f78c78f0b21bbc84e3b0bccb9e1ec3","ssdeep":"96:nc2lFmbnNfujGWfbZ9rVjoPfbJYTtXEl9wHk3:nc3nFujBHrVjoYZKr","tlshash":"a891fffae698f5e05506d3b8d83e9ab2353f34fe3b45894907506e886f2116a84cddc8","first_seen":"2025-10-18T22:41:30.154223Z","last_seen":"2026-09-08T18:10:54.440967Z","times_seen":19,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/chunk-62oNxeRG.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:10.540Z","timestamp":1788891010540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/chunk-62oNxeRG.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 626\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 9a74711c9b1418a7\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPv%2BeXnycZ0vjcwMJy%2BXc8CgaFzM6XXhINSoUKaBpAbMYXD7g0LDg933YKgMaFNR%2F6NqJ4c3Vxf1zW7Tt1A6x0XJCQOYKJ1KRlCRxwdTj0Eu6Aj1CS6tMDwnLs1Hklt0NA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe88fec06d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1084,"size_decoded":1672,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1084), with no line terminators","md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-09-08T23:45:39.888901Z","times_seen":399,"resource_available":true,"data":null}},"time_used":5684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bac-vnqern.com/assets/hero_actividad-llhqGCQA.js","fqdn":"bac-vnqern.com","domain":"bac-vnqern.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bac-vnqern.com/","date":"2026-09-08T18:10:26.316Z","timestamp":1788891026316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bac-vnqern.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:31:24 GMT","end":"Thu, 26 Nov 2026 13:31:14 GMT"},"fingerprint":{"sha1":"44:85:96:68:1B:4E:28:EC:F0:AB:41:87:D8:1B:5A:94:DD:76:36:21","sha256":"03:E4:31:A6:11:8A:01:B4:C5:3D:31:15:0F:6F:31:FE:46:12:7F:8B:8E:12:F4:0A:32:54:C9:AF:C8:A3:CB:AE"}}},"request":{"raw":"GET /assets/hero_actividad-llhqGCQA.js HTTP/1.1\r\nHost: bac-vnqern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bac-vnqern.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 18:10:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 83\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Jun 2026 02:27:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-project-path: baccredomatic_cash_miles\r\nx-request-id: 8b69f795a196a317\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pAu2AUdN28nxKv%2B9Z1sZKmAsU%2Bm9mcaibV99cx1cvg1cha2VR%2BWhpikD5%2BpozzUwh6l%2Bx3xLaSiY0nj1Zbx4IH9DiWMz1W9I4%2BnuQLt9rsQK7EyicgkNlC7h40GAmLE3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a37fe8f28ec0d90a-CPH\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":1134,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a44f856214fb9f25e5c5a9b413868838","sha1":"7c1061c6a100aca3be38d45ab02efcbaf5d13ee9","sha256":"db52b5ebdc647e31ad914c0aae18f96789adb9d18e2d4060d5ff445e41f1c60d","sha512":"96755b61faad3d53fdf76b2a406e4406bd2bc9357030e3c02acdb41cbff486414e2c1a486451bc74ed147c7d376e8f3f7e761f3401e26c9ee47a73f35a6cb29e","ssdeep":"","tlshash":"70a02202330200f02030a000200008c38800220ecf22c30008080000e2000c002c0c32","first_seen":"2026-07-07T14:39:32.449355Z","last_seen":"2026-09-08T18:10:54.442441Z","times_seen":13,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"bac-vnqern.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"bac-vnqern.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}