Overview

URL bbva.digital-1.one/
IP20.26.209.133
ASNMICROSOFT-CORP-MSN-AS-BLOCK
Location United States
Report completed2022-09-07 22:26:00 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
2022-09-07 2 bbva.digital-1.one/ BBVA
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-07 2 bbva.digital-1.one/ Phishing
2022-09-07 2 bbva.digital-1.one/ Phishing
2022-09-07 2 bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1? Phishing
2022-09-07 2 bbva.digital-1.one/login/logo_bbva_blanco.svg Phishing
2022-09-07 2 bbva.digital-1.one/login/BentonSansBBVA-Medium.woff2 Phishing
2022-09-07 2 bbva.digital-1.one/login/BentonSansBBVA-Book.woff2 Phishing
2022-09-07 2 bbva.digital-1.one/core/token/core_token.js Phishing
2022-09-07 2 bbva.digital-1.one/login/BentonSansBBVA-Light.woff2 Phishing
2022-09-07 2 bbva.digital-1.one/bower_components/ua-parser-js/dist/ua-parser.min.js Phishing
2022-09-07 2 bbva.digital-1.one/bower_components/jquery/dist/jquery.min.js Phishing
2022-09-07 2 bbva.digital-1.one/bower_components/angular/angular.min.js Phishing
2022-09-07 2 bbva.digital-1.one/login/form/form.js?v=63191a6fd96a4 Phishing
2022-09-07 2 bbva.digital-1.one/login/form/form.js?v=63191a6f6346e Phishing
2022-09-07 2 bbva.digital-1.one/core/form/core_form.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (9)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-07 04:50:01 UTC 23.36.77.32
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-07 04:49:50 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-07 14:29:23 UTC 93.184.220.29
mnemonic passive DNS bbva.digital-1.one (65) 0 2022-09-06 13:08:19 UTC 2022-09-07 22:17:22 UTC 20.26.209.133 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-07 05:03:48 UTC 143.204.55.49
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-07 05:08:41 UTC 52.40.161.235
mnemonic passive DNS i.imgur.com (1) 5110 2012-05-21 08:09:36 UTC 2022-09-07 06:05:03 UTC 151.101.84.193
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-07 12:21:16 UTC 34.120.237.76
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-07 12:55:42 UTC 143.204.55.115


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.26.209.133

Date UQ / IDS / BL URL IP
2022-09-10 16:42:48 +0000
0 - 0 - 3 combank.au-ssl.one/ 20.26.209.133
2022-09-07 22:26:00 +0000
0 - 0 - 77 bbva.digital-1.one/ 20.26.209.133
2022-09-07 21:18:19 +0000
0 - 0 - 34 dkb-konto.digital-1.one/ 20.26.209.133
2022-09-07 09:36:51 +0000
0 - 0 - 19 dkb-konto.digital-1.one/a1b2c3/28684d7ae701a3 (...) 20.26.209.133
2022-09-07 09:36:12 +0000
0 - 0 - 20 dkb-konto.digital-1.one/a1b2c3/2da6ddd24923c8 (...) 20.26.209.133

Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK

Date UQ / IDS / BL URL IP
2022-12-02 05:56:22 +0000
0 - 0 - 1 52.98.94.210/ 52.98.94.210
2022-12-02 05:28:57 +0000
0 - 0 - 32 kraftonin.com/ 20.9.70.76
2022-12-02 05:17:53 +0000
0 - 0 - 3 20.100.168.215/ 20.100.168.215
2022-12-02 05:14:57 +0000
0 - 0 - 2 41000.bet/ 20.222.61.39
2022-12-02 05:05:20 +0000
0 - 0 - 48 s17maxwin.my.id/ 20.198.224.6

Last 4 reports on domain: digital-1.one

Date UQ / IDS / BL URL IP
2022-09-07 22:26:00 +0000
0 - 0 - 77 bbva.digital-1.one/ 20.26.209.133
2022-09-07 21:18:19 +0000
0 - 0 - 34 dkb-konto.digital-1.one/ 20.26.209.133
2022-09-07 09:36:51 +0000
0 - 0 - 19 dkb-konto.digital-1.one/a1b2c3/28684d7ae701a3 (...) 20.26.209.133
2022-09-07 09:36:12 +0000
0 - 0 - 20 dkb-konto.digital-1.one/a1b2c3/2da6ddd24923c8 (...) 20.26.209.133

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-24 06:37:00 +0000
0 - 0 - 13 kyppsworld.com.br/usuario/index.php?32wdefwve? 143.198.129.225
2022-11-18 03:18:20 +0000
0 - 0 - 14 software.saadpetroleum.com/usuario/index.php? (...) 162.244.93.225
2022-11-12 03:30:11 +0000
0 - 0 - 17 rbbvarsonas.com/usuaro 159.65.124.154
2022-11-11 09:02:55 +0000
0 - 0 - 1 doc.feserwam.org/usuario/?id_JIBBRS=DR-399842 3.138.72.149
2022-11-09 20:47:20 +0000
0 - 0 - 12 doc.feserwam.org/usuario/index.php?Asd8932q3d? 3.138.72.149


JavaScript

Executed Scripts (14)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (84)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         20.26.209.133
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Wed, 07 Sep 2022 22:25:49 GMT
Content-Length: 162
Connection: keep-alive
Location: https://bbva.digital-1.one/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 07 Sep 2022 22:04:59 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ux8VX14kdgkCb80nHXNz3_fM4hCm7bJXPhOwJVU4--xm9inHgYrcjA==
Age: 1250


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    b593eb39329cfe060d55be5e4a5405e2
Sha1:   78e46c1028e9f94f8569303ad2d90d7df13a059a
Sha256: 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14242
Expires: Thu, 08 Sep 2022 02:23:11 GMT
Date: Wed, 07 Sep 2022 22:25:49 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mXxn-C5g2P_hp5vCv9ZWzL8g6HaAlasEiCNq8tPOzRh6ANSTunsP0w==
age: 67155
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:50 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C3F6AABD82BD93C805BEAF0ED2BE4D15A628B535A87237241012D69899C4C18A"
Last-Modified: Tue, 06 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21572
Expires: Thu, 08 Sep 2022 04:25:22 GMT
Date: Wed, 07 Sep 2022 22:25:50 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:50 GMT
content-length: 452
set-cookie: real=OK
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/8.0.23, PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   452
Md5:    3081417078fa4330db09e30df512d0d5
Sha1:   b824a6ee13644d34cfe9e67a68efd9ee970d565b
Sha256: a068a8e830c0e6ab56d9be2ea3df543b022bc4c19cc53889c199228bbacb0ea9

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 07 Sep 2022 21:38:18 GMT
Expires: Wed, 07 Sep 2022 22:05:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zAPW0ou0LDlzDsLGSlOLQ5MfgBbkLNtuTx7z34BBKVd4mcsV0LBT_Q==
Age: 2852


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4421
Cache-Control: 'max-age=158059'
Date: Wed, 07 Sep 2022 22:25:50 GMT
Last-Modified: Wed, 07 Sep 2022 21:12:09 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fI63+dxfknJvqX+fZ+sWdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.40.161.235
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ioSwEVQU44EyzYkojJCj2ESWenM=

                                        
                                            GET /a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1? HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/
Cookie: real=OK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 301 Moved Permanently
content-type: text/html; charset=iso-8859-1
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 345
location: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/?
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   345
Md5:    0fcb07b39c5597cc2621f95bb6e39103
Sha1:   d819d1daefd5abef85269ab13e928fa11c894f16
Sha256: 3a92727663344a01fa5423770f691becced406ddf6d30e35c765c7cfce3bfb26

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/? HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bbva.digital-1.one/
Connection: keep-alive
Cookie: real=OK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 0
set-cookie: bid=1b5acd2a4e5f7ef413f24e668340d9f1; expires=Fri, 07-Oct-2022 22:25:51 GMT; Max-Age=2592000; path=/
location: login/?
x-powered-by: PHP/8.0.23, PleskLin
X-Firefox-Spdy: h2

                                        
                                            GET /a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/? HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bbva.digital-1.one/
Connection: keep-alive
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 12556
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/8.0.23, PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (786)
Size:   12556
Md5:    1749d76116b38462c62eae9eef7d7f60
Sha1:   2a9d84cbe812c5ce9e80586967df171e05a1520c
Sha256: 16559fd2b24576e4daf64ac04f7fb6d1bda08b9707aecfc97a31526081da1431
                                        
                                            GET /login/form/css.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 126
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 21:43:45 GMT
etag: "b1-59d7677ca4640-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   126
Md5:    09208055fd9fd5e9a5f51db44418a81d
Sha1:   dff3e125b1a310aa316a9b872372c97269419dc8
Sha256: 717cde0787a854aad6c8cbf7b5c027ca2ff582cb4435836f145cdd24c8ddde15

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.iframe.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 181
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "109-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   181
Md5:    dff34c02b40a1c20c948ddab0b0a2f7f
Sha1:   3216ff57c8202a8a5736b7493abcaabfd2c748fa
Sha256: 7b60d0de53b7da41bbf5f06bc26d62d2fdde425038fdc1c93120086b7bebf55a

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.sectionTitle.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 323
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "2f3-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   323
Md5:    00e2bb6f54c63f8d43101a986d4c2bb0
Sha1:   606515ee557fb8f8043cacb7926e4992f32cbce4
Sha256: 5a7a1145ead380d38b8df42fd07258eeb3d1370862399dcd13049f00b8f211a3

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.downloadbtns.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 104
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "e7-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   104
Md5:    ad37694393ae294e8deaf0f02c3031e4
Sha1:   1a421167a8e4fe2df17c1f5a2f1519529616a105
Sha256: deed031d00b92e0cd0fb95a9ca3dc26c90e798f016b62bcf666242f7cd1c65e3

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.radiobutton.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 371
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "2b8-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   371
Md5:    29901c774beff20ff2ce358c40a8af3f
Sha1:   0774d7407b495d682e389ed6beef67519742362b
Sha256: 985dd573603020c76fc96629d5743704bd6115c9b5df56424dcd2a45a6e198f6

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/Home_Euro.png.img.320.1579263321777.png HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 11133
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-2b7d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size:   11133
Md5:    252fbccddbcbfb36a8f93b91146a1c9b
Sha1:   a75bfca35fc8179e6cb5884915ce12067dd3ef9b
Sha256: d8c4fa85962b026f621fbf9c93c7f37eb07d78fc66c11f81f70b40ef1828a7a0

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.linkwithicon.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 388
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "356-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   388
Md5:    9b25c44f1b85e5a6d6a39e7fa44f83c5
Sha1:   ff963fd0d265b14718ed861353641e6fcb36553b
Sha256: 80972b0d321827e5d5b51b4492488789fffe76a3db22a8f00c6b0ad722959278

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/logo_bbva_blanco.svg HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 1897
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-769"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1897
Md5:    0a98d358e055756332b1abffe60e7240
Sha1:   3bac63e228ef32a7a4b6dda5bffb4d4aa7a63677
Sha256: 4110bfbebf5162bd8ce32b34a411c8c4ec827b0d65947993c25379646e5db120

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/bbva.ctamobilesticky.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 418
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "398-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   418
Md5:    162a0e778b575bbf0a2b607c8e5d7770
Sha1:   c4b0f02fd68888d04d72d0d0e8c388d1db79e255
Sha256: f32505b65367ac95829597e2fdc3e2f55713f60882a758b408c3c3e680b919b9

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.link.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 341
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "245-59d745f49ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   341
Md5:    2ea022de2b18bbafecfee227bb622765
Sha1:   5d51068ff69b320139494075a000a6dc0bd6c40f
Sha256: 71a01dd30422cedff6cb064161322e6a968e113133a75fbf8869eedf365af168

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/Security_Access_Mobile.png.img.320.1564484197651.png HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 10435
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-28c3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size:   10435
Md5:    fe040653e3cd22e4828de1c8249704ff
Sha1:   2efece53499aadc72b70721aef7841d35e683a75
Sha256: 5841b571a77de7c977ec76b5e60cc71b6445a8779e11867bdecdf09b130b7f32

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/d5fceb6532643d0d84ffe09c40c481ecdf59e15a.gif HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 42
x-accel-version: 0.01
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "2a-59d745f49ea00"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/ATM_Locate.png.img.320.1564483879680.png HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 9566
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-255e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size:   9566
Md5:    76e4c1efdf89b6f2a8a332a63ed5f57a
Sha1:   6ad8f9d3e83491e5fd6a8c474d1387fb91a83677
Sha256: 00fc58ff1764bf1faadb2126ae30940d43181e63efae51b59ff67d706998aae7

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/600x600-forrester-color.png.img.320.1570518350529.png HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 13645
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-354d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Size:   13645
Md5:    552ad20d62a7e532825c120976ede0be
Sha1:   fa399db2561d70a59d19114563443f88408cf855
Sha256: 4a235caf702d13bd1e07228dfd89a61ff68a379ebcc55aa09b5f37d948a2134c

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.lightbox.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-189d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (458)
Size:   145845
Md5:    3d71373c60b1df998e63bae42c869957
Sha1:   e04e015afe91e4462de743067d2d24a14d621b1d
Sha256: bb31a92a23e7a9eff6a0b14abbdb2299f00824f2f88b1f77985db8fc0a6d1230

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/BentonSansBBVA-Medium.woff2 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bbva.digital-1.one/login/bbva.fonts.lc-20200115-160521-lc.min.css
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: font/woff2
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 54240
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-d3e0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 54240, version 0.0\012- data
Size:   54240
Md5:    9008adfae2be2cc606e6d08c1317ddad
Sha1:   387051408ea047d01e0ddb4d23647e0b40e54f15
Sha256: c22b599398a1008cfff047a39d1aca99d8124e6fd3973c68aa6c246504fcfb62

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/BentonSansBBVA-Book.woff2 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bbva.digital-1.one/login/bbva.fonts.lc-20200115-160521-lc.min.css
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: font/woff2
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 52648
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-cda8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 52648, version 0.0\012- data
Size:   52648
Md5:    e65584acf8afac18b2cd796b5d87a26a
Sha1:   14e2d4f852451934f50802f3e2dd8cdc3d954232
Sha256: 5ad9905e946ca98b15a519996a8f675f31a421ed56a526a4212a8af6b4e79432

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /core/token/core_token.js HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Mon, 21 Sep 2020 17:47:18 GMT
etag: W/"5f68e726-2ebf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11967), with no line terminators
Size:   57714
Md5:    2c4d5f46c3392a036888c7f8fe706bf9
Sha1:   6335961b409f46204818423f896deabd316045e5
Sha256: 0f094bafb632b4d9c52b07362bfbc6ea4e3ddf819c4bff8cc2a42e80d0830c65

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/BentonSansBBVA-Light.woff2 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bbva.digital-1.one/login/bbva.fonts.lc-20200115-160521-lc.min.css
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: font/woff2
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 47212
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: "5e347c68-b86c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 47212, version 0.0\012- data
Size:   47212
Md5:    381d8503fd307606a8d6eba836479d50
Sha1:   cd07c60f9aac3833cc924f512328800017c4231b
Sha256: fe9478c3062c20141118549db658dc3bab2be67b26677b30ae71c4672e608d3c

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/form/newloader.gif HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
content-length: 557122
last-modified: Mon, 16 Sep 2019 06:51:55 GMT
etag: "5d7f310b-88042"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 480 x 480\012- data
Size:   557122
Md5:    ef8d4e6b20b0cf0d68713fb2f6069042
Sha1:   d62bb4b1a169c88879de3bd2f5c4292b6259a952
Sha256: 32bfc673211421c1a5a33acc98291840183582f11d15490954b42a81d79d4630

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /bower_components/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Thu, 12 Oct 2017 08:16:24 GMT
etag: W/"59df24d8-4298"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16817)
Size:   8750
Md5:    b73461d515e27adbfcfe516daf1bf123
Sha1:   418cd2cbd3d08fee170e973819e5ad3bba686c67
Sha256: bf5f20ea5dd600bf29582412930de96281a131b58dc8a0463a2a5742488be162

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /E6A3i5P.png HTTP/1.1 
Host: i.imgur.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.84.193
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 31 Jan 2020 20:48:31 GMT
etag: "08faf643a1aa87497264011c6cc7e3ee"
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 07 Sep 2022 22:25:51 GMT
age: 3157144
x-served-by: cache-iad-kiad7000064-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662589552.897669,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 15600
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 97, 8-bit/color RGBA, interlaced\012- data
Size:   15600
Md5:    08faf643a1aa87497264011c6cc7e3ee
Sha1:   cf40c809aa7a7cf5d7d4ac2ba904dbdecb61d5ac
Sha256: 29c35819c2f32468157612162354fe1cf260aaf45ca113435ef06a5144343571
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9096
Expires: Thu, 08 Sep 2022 00:57:28 GMT
Date: Wed, 07 Sep 2022 22:25:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9096
Expires: Thu, 08 Sep 2022 00:57:28 GMT
Date: Wed, 07 Sep 2022 22:25:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9096
Expires: Thu, 08 Sep 2022 00:57:28 GMT
Date: Wed, 07 Sep 2022 22:25:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9096
Expires: Thu, 08 Sep 2022 00:57:28 GMT
Date: Wed, 07 Sep 2022 22:25:52 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6df26b-97aa-461c-9f22-c5c9496b5701.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8705
x-amzn-requestid: ccc5b695-35b5-49fd-b938-296a88a78ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgFOiIAMFaXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-12e809c767cdbba61492187c;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: W4siV0rqMGbs2Z7TiD3PvD2j2ErD69gIbIDY2N3RInKx61vDyRTxXA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:55:10 GMT
age: 1842
etag: "f6ef30b5df0e634c3a3f607d751e738e55a276c9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8705
Md5:    24e43bc53a0b047911cff00ad4b72320
Sha1:   f6ef30b5df0e634c3a3f607d751e738e55a276c9
Sha256: 7e1406b2101c912e72f37f0257128574079e618c1af83e360acb3f29b4d44d89
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a39739-e855-4625-859f-7e2fed3d2511.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12107
x-amzn-requestid: 9ea883d8-b844-49d0-8651-67124d2c0852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgHANIAMF5rQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-137ad22c52baa6fb04ae190d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fq_ew5bfpcSJ7F229SyDLZlpOnmSWujlU7HzwsQIS1q2HZSvsHGuvQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:58:58 GMT
etag: "15cefe1e2be8ad63e40cfe02c2f5f8c59af015ad"
age: 1614
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12107
Md5:    a9ca2de4e61d1aae73da7d13ad3ec727
Sha1:   15cefe1e2be8ad63e40cfe02c2f5f8c59af015ad
Sha256: 911550bc2b8e4c4aad215692361fe494275002f89faa9eae2e2fc2664da1107c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:10:03 GMT
age: 62149
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6214
Md5:    f922505178de0cea92eedcfda85a9f67
Sha1:   50f1459de01174e594e03e7df4dfaa8eb1798672
Sha256: 981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9255
x-amzn-requestid: f4092ba2-d141-44cf-8e0e-a4ee46b397ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThFAeoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-4ee1ceb30135f4e1763e98b9;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: tu-GbziQ9EiVPYqgRQACTqz4AziuY6YICQwMD6Rnk1dnvDKSRYCdIQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:52:01 GMT
age: 2031
etag: "6ed123d7a797b7eb52a34e87c79aa8562bede4e1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9255
Md5:    f691eddbd9502201c90f81568f4f63fc
Sha1:   6ed123d7a797b7eb52a34e87c79aa8562bede4e1
Sha256: 6d2b6ff8acdc63829050d68084997737ac8cbbe52aba6189ab8908f7dcb800b4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F54a37db8-5622-4532-b3bf-d5e45c3888d3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6751
x-amzn-requestid: 847805f8-6893-4c51-80b9-655aa50f922d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TiGnlIAMF_oA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-293897317a79be817669cfaa;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: PXGgZayFEn6dT_yaSsCIWDtSvinPyWI6tr6iFYdRRizbOKv5Qw3dzQ==
via: 1.1 0b8b9a0373f930a971a9e76550280d02.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 2327
etag: "8e94919a162c8bcf1ce76f395e8e8bddc94ed9a5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6751
Md5:    d1232dc455c65c9e2d4515b6235ca8c7
Sha1:   8e94919a162c8bcf1ce76f395e8e8bddc94ed9a5
Sha256: 9c8ad996fff98d6dbd7a43c4c36905013d6e74649976294cd3a429f276a0db58
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8def29c-7ade-4990-abac-c54befd5dd27.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6330
x-amzn-requestid: 9e6e1482-e341-4abf-9aab-0c9a1c2911ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgGplIAMFd1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-69decda2237011501bdc7327;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KwVV15KPKIWgELQ4Svs5GDj2XZDia4tXiDyBXncXJKs_hCzK58DoRw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:02:24 GMT
etag: "48c83029644495c0ee4041d647e7f29a38048825"
age: 1408
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6330
Md5:    b413a04f7d68e7fbcc3c8eca91c380c5
Sha1:   48c83029644495c0ee4041d647e7f29a38048825
Sha256: d5fd885c0e8e9788d6006123b4eaa4e588ef7658b73c2f711445100142d784f4
                                        
                                            GET /login/bbva.header.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-22fc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.microillustration.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-c74"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.productslider.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-fff"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/login.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/index_1.php
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 21:03:56 GMT
etag: W/"5e34963c-3b3b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/
Cookie: real=OK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 404 Not Found
content-type: text/html
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:50 GMT
last-modified: Tue, 06 Sep 2022 12:57:35 GMT
etag: W/"328-5e801bd79fd41"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.fonts.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 21:03:56 GMT
etag: W/"5e34963c-21d7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.critical.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 20:52:27 GMT
etag: W/"5e34938b-428d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.accordion.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-1c60"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.featuredoutstandingopportunitycard.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-dfc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.cta.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-854"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.slider.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-92b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.megamenu.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-2bc2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /bower_components/jquery/dist/jquery.min.js HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Mon, 05 Jun 2017 03:55:06 GMT
etag: W/"5934d61a-15283"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /core/form/core_form.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Sun, 23 Aug 2020 14:52:30 GMT
etag: W/"5f4282ae-b9d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.prefooter.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-a4b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.promoalert.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-1dc9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.swiper.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-36aa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /bower_components/angular/angular.min.js HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/index_1.php
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 18 Aug 2017 14:37:28 GMT
etag: W/"5996fba8-2937c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/bbva.common.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-35e9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.searchbar.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-1d83"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/form/form.js?v=63191a6fd96a4 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/index_1.php
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Sat, 01 Feb 2020 18:57:12 GMT
etag: W/"5e35ca08-e6a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/index.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 20:38:25 GMT
etag: W/"5e349041-5472"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.microillustrationcard.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-61d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/form/form.js?v=63191a6f6346e HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Sat, 01 Feb 2020 18:57:12 GMT
etag: W/"5e35ca08-e6a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/bbva.mainNavigation.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-c04"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.stickybanner.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-891"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.microillustrationsmodule.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-656"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.linklistmodule.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-534"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /core/form/core_form.js HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 11 Sep 2020 06:30:16 GMT
etag: W/"5f5b1978-5645"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
    - fortinet: Phishing
                                        
                                            GET /login/bbva.videoLink.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-495"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.outstandingopportunity.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-16d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.homemicroillustration.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-469"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.stickyalert.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-6d3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.outstandingopportunitycard.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-1542"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.godigital.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-279b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /login/bbva.helpsticky.lc-20200115-160521-lc.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Fri, 31 Jan 2020 19:13:44 GMT
etag: W/"5e347c68-fd9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/?
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:51 GMT
last-modified: Sun, 09 Apr 2017 04:29:24 GMT
etag: W/"58e9b8a4-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /home.php?pl=token&link=bbva.es&bid=1b5acd2a4e5f7ef413f24e668340d9f1&callback=jQuery3210005552623689656477_1662589544964&data=%7B%22mes%22%3A%22User%20on%20login%20page%22%7D&_=1662589544965 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/index_1.php
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:52 GMT
x-powered-by: PHP/8.0.23, PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA
                                        
                                            GET /home.php?pl=token&link=bbva.es&bid=1b5acd2a4e5f7ef413f24e668340d9f1&callback=jQuery3210005552623689656477_1662589544964&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1662589544966 HTTP/1.1 
Host: bbva.digital-1.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://bbva.digital-1.one/a1b2c3/1b5acd2a4e5f7ef413f24e668340d9f1/login/index_1.php
Cookie: real=OK; bid=1b5acd2a4e5f7ef413f24e668340d9f1; lng=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         20.26.209.133
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 07 Sep 2022 22:25:57 GMT
x-powered-by: PHP/8.0.23, PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: BBVA