r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Thu, 17 Nov 2022 05:39:52 GMT
Date: Thu, 17 Nov 2022 02:14:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4e84f361a3c81abc5d665a5f441452a8
7aa4b9cb0a7ba1daa514dbb48fe8e74fdf09b60d
04d64920cc8e6b096841938b0c1140889f5d7a04eabd440934a31f1c7ab90352
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04D64920CC8E6B096841938B0C1140889F5D7A04EABD440934A31F1C7AB90352"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3097
Expires: Thu, 17 Nov 2022 03:05:57 GMT
Date: Thu, 17 Nov 2022 02:14:20 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9b4e6c72233070ef185ff980135e9555
2f14523a3f6f9532df3b872984fd23e156d2c465
5040e340e60b331b1569d52d66afcd5649a4121e2841d38cca0974e2a4c0af75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2753
Cache-Control: max-age=118970
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:20 GMT
Etag: "6374bbf5-1d7"
Expires: Fri, 18 Nov 2022 11:17:10 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: REyVZrtE/ewQaL73iAXzKsPNFCpjmVTprcmsMaPxPG4U7B3JsJGwdNH1Qj3XFXNaV4vryfPXDZI=
x-amz-request-id: 6WTVQKG8KAJKK11C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 17 Nov 2022 01:52:16 GMT
age: 1324
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 17 Nov 2022 01:44:39 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1781
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 02:14:20 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash daaae018a7a3a625fc43a69ed0e7bd69
420af075f88932cc6c123610ecf6ac892736e66e
04e4a0bf923103d32e0e2343c72a9e9cdbc0fc43ee37872b4ffd4b481f293b43
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04E4A0BF923103D32E0E2343C72A9E9CDBC0FC43EE37872B4FFD4B481F293B43"
Last-Modified: Wed, 16 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21591
Expires: Thu, 17 Nov 2022 08:14:11 GMT
Date: Thu, 17 Nov 2022 02:14:20 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 17 Nov 2022 01:25:01 GMT
cache-control: public,max-age=3600
age: 2959
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8345d8a2ca46c3b181a81d8626d0425f
5d9d088c5dca072bbc9ad23a15450e7af7829400
663b0e6c239177f35b5b48d4203ce95aabc0e5bab7911f5b1d9fb7624cac2e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5859
Cache-Control: max-age=117026
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:20 GMT
Etag: "6374a83b-1d7"
Expires: Fri, 18 Nov 2022 10:44:46 GMT
Last-Modified: Wed, 16 Nov 2022 09:07:07 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash e342b93cb19547444d1bdefbefbbee8e
f0563fe02a981d758ff1c71175782ce9e2ed7d6c
120ac1248a3b12815813ee14a7d4292334f71973aa7b22e28d305b2b3983ec73
GET /gtm.js?id=GTM-5QM5P4Q HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 17 Nov 2022 02:14:20 GMT
expires: Thu, 17 Nov 2022 02:14:20 GMT
cache-control: private, max-age=900
last-modified: Thu, 17 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45342
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dependentevilarchives.cuidadswe2.repl.co/index_files/ciudad.svg
34.149.204.188200 OK 4.5 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/ciudad.svg
IP 34.149.204.188:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3283)
Hash c73e5d18223746a44d6d2fc666e9e804
4e0e21ce77d00569449cb264229b347300038783
69c24732e6b7afebfc32b64f5dc465aed7c1e5ae2083d8a4327931618f323f17
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/ciudad.svg HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-length: 4511
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.186.117.16101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.186.117.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h7h2aQCq6zld+t8vVDIsRQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gRNLSQaMyD+o7j79k5M4a3ptu50=
dependentevilarchives.cuidadswe2.repl.co/index_files/icono-login.png
34.149.204.188200 OK 6.2 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/icono-login.png
IP 34.149.204.188:0
File type PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash 3060236dd0018dfbc4cb7a6cf0a3ec68
6c8496aa09c8262a23b7923ca8571f93e36b90d8
c0e6f30e7bbb291540bdc48ead3ce0c41a9c99cf813e521572225a46215e7931
Analyzer Verdict Alert openphish Banco Ciudad
GET /index_files/icono-login.png HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-length: 6233
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/runtime.ec2944dd8b20ec099bf3.js.descarga
34.149.204.188200 OK 1.5 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/runtime.ec2944dd8b20ec099bf3.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1451), with no line terminators
Hash d68ae1d68307abe5cbce649d966e97f1
21109b3561b5a6c3ed51bc3015962f05da8e57b3
f6d14a5c40a406c335c7aea3f6983070bb59111b470bdf39bd7e1c3f4618b9f4
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/runtime.ec2944dd8b20ec099bf3.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 1451
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/colors.js.descarga
34.149.204.188200 OK 755 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/colors.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (755), with no line terminators
Hash 8a0ccd362c3f22c9cf239d05b210a994
5865d553986f59538f56eed1a27c490a9f6bb0b1
830c8c46ae7149f8c395c44b9089d0a12ccca34449d2a8b1992186b059c43fd9
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/colors.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 755
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/serviceworker.js.descarga
34.149.204.188200 OK 139 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/serviceworker.js.descarga
IP 34.149.204.188:0
Hash ec431e4821c417259968c9433c173d7a
e20a8ea582c50a6ecd98e38967b6206f3f5464cf
bf15ddcaa9d1e8dcc42d385983c30efdec4b85650c6d2452df31979b404e3160
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/serviceworker.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 139
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/popper.min.js.descarga
34.149.204.188200 OK 19 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/popper.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (19063)
Hash 6cd956453e307bfd2ce4bfb0648b9f7d
a43367193adc1258902e5b68ad0cda6cf0f9ff8f
625b022a42ed5d9c39911e42050f4fd9834ea039af978b7716f7800ade95eb55
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/popper.min.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 19197
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/analytics.js.descarga
34.149.204.188200 OK 50 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/analytics.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1325)
Hash d40531c5e99a6f84e42535859476fe35
a901817d77b2fe5259c298c91bc65c54d7f8a1a9
a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/analytics.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50205
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/bootstrap.min.js.descarga
34.149.204.188200 OK 51 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/bootstrap.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (50277)
Hash 46b549bdc90920f18a911f186b9dd75c
3c639c4af5c036a6ee364215bd12c0b12937827d
1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/bootstrap.min.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50564
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/jquery-3.5.1.slim.min.js.descarga
34.149.204.188200 OK 72 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/jquery-3.5.1.slim.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (65245)
Hash 767a77430d12bd654d8f0c92cc21298c
75c2ff61e87f9ae41f55f4e845812aad189ab9af
c46dc051ce81c4af2b2096abbf885ae4ba7467ff5db0f0106ceee928cf3658a3
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/jquery-3.5.1.slim.min.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 72379
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&a=103297054&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1289597649&gjid=1473405195&cid=544724688.1668651260&tid=UA-160231695-1&_gid=212864838.1668651260&_r=1>m=2wgb905QM5P4Q&z=2116918267
142.250.74.174200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=103297054&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1289597649&gjid=1473405195&cid=544724688.1668651260&tid=UA-160231695-1&_gid=212864838.1668651260&_r=1>m=2wgb905QM5P4Q&z=2116918267
IP 142.250.74.174:0
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&a=103297054&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1289597649&gjid=1473405195&cid=544724688.1668651260&tid=UA-160231695-1&_gid=212864838.1668651260&_r=1>m=2wgb905QM5P4Q&z=2116918267 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dependentevilarchives.cuidadswe2.repl.co
date: Thu, 17 Nov 2022 02:14:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/gtm.js.descarga
34.149.204.188200 OK 112 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/gtm.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1615)
Size 112 kB (112339 bytes)
Hash a62703f02b9e358ea0ebf5f14b768411
6c9fc592a82fa258015aa72eb2c36594fe51cb96
69e68184ffe4bcbb1643904ffa7edf803bec7cd57d578968b69515a789a72a95
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/gtm.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 112339
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
34.149.204.188200 OK 143 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 143 kB (142683 bytes)
Hash 050f5593a795beffaae3aa1af2f42c6d
6f09825e9255091665f31ae93fa12c47dae4a4c2
e428b9c4a2a312c519cb59eef4b605756f125ed3a53fa975058b737748fb2b47
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 142683
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 53317aec9cafbd68ce439e1bdd7d4252
6827fa0a399c5be70f05aaeb5b44cc8071026f65
04a81d99b7b214fbd8a19882d71daedc13b5cd8fca333e6d075a017b2521a555
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=544724688.1668651260&jid=1289597649&gjid=1473405195&_gid=212864838.1668651260&_u=YEBAAEAAAAAAAC~&z=1949509253
142.251.1.156200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=544724688.1668651260&jid=1289597649&gjid=1473405195&_gid=212864838.1668651260&_u=YEBAAEAAAAAAAC~&z=1949509253
IP 142.251.1.156:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=544724688.1668651260&jid=1289597649&gjid=1473405195&_gid=212864838.1668651260&_u=YEBAAEAAAAAAAC~&z=1949509253 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dependentevilarchives.cuidadswe2.repl.co
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 17 Nov 2022 02:14:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 53317aec9cafbd68ce439e1bdd7d4252
6827fa0a399c5be70f05aaeb5b44cc8071026f65
04a81d99b7b214fbd8a19882d71daedc13b5cd8fca333e6d075a017b2521a555
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
34.149.204.188404 Not Found 598 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b3b99ae27b0f9d1595377caf7662ba60
6f94700d1525a5856ea877e56071c899c04b2bd9
8657ea34a641da845906401f5f319f1439e128b61009c634c278512ede6242f9
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.544724688.1668651260; _gid=GA1.3.212864838.1668651260; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 02:14:21 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751825; includeSubDomains
content-length: 598
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
34.149.204.188404 Not Found 597 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5bd90043db98c8ce5d4e168322dff1c
8a51d728684c45ca8583e058670662185d012a2a
ac8f2b25592bd3b65fa13716577d0c6f3594e6f652bf4663b2330e0aa1dd99e6
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.544724688.1668651260; _gid=GA1.3.212864838.1668651260; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 02:14:21 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751825; includeSubDomains
content-length: 597
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2
34.149.204.188200 OK 65 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2
IP 34.149.204.188:0
File type Web Open Font Format (Version 2), TrueType, length 64632, version 1.0\012- data
Hash 73f0a88bbca1bec19fb1303c689d04c6
463a07f5c66bf14e6d9d6e0f6d5e3fd3cb11f4ec
47107401d0adb375ab9aa167f9d62489a849d510e740a307b5a4db60e5db3562
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2 HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.544724688.1668651260; _gid=GA1.3.212864838.1668651260; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Thu, 17 Nov 2022 02:14:21 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751825; includeSubDomains
content-length: 64632
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5339
Expires: Thu, 17 Nov 2022 03:43:21 GMT
Date: Thu, 17 Nov 2022 02:14:22 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5339
Expires: Thu, 17 Nov 2022 03:43:21 GMT
Date: Thu, 17 Nov 2022 02:14:22 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9d32fa3866dd741de610a61a93ad893
4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e
4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:34:18 GMT
age: 16804
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F804fadbf-ab3b-4628-9d0e-4b2b2ec53af3.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F804fadbf-ab3b-4628-9d0e-4b2b2ec53af3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3c00f498f756c3146f909dadb570c61
ad3a3ff568d100f1b874bad551e7eb7777e9d07b
c524adc493d745dda34c677753f335a2fc3cc875aa84253a48a206863443a70c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F804fadbf-ab3b-4628-9d0e-4b2b2ec53af3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8681
x-amzn-requestid: ff20215d-9e0e-4516-b44d-1b40187d1a1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqPYFNBoAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375572f-6543ac9558d2ecb6388efd4f;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cR-VyaHzEtxaKUttKCVR4-S0HSuY3F6l596ZUF0Xi4luAoPvSmm4_Q==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:35:33 GMT
age: 16729
etag: "ad3a3ff568d100f1b874bad551e7eb7777e9d07b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZLWa-RphwZqiAmeqffmEE8Mmfsfs9ZYz0bmANBEc5Ru1--VKDL4Fsw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 15:50:08 GMT
age: 37454
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
34.149.204.188200 OK 7.1 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
IP 34.149.204.188:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6745e349c1a9954d4a040726d69ea8e6
ef7aa5dda798292b017327556df4b8a416de1fca
41d025ee826f4573dd57c9db5881083159a6ebec3827b1972a9eac48a720abc4
Analyzer Verdict Alert openphish Banco Ciudad
GET /index_files/styles.542f8738520c301b6503.css HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
content-length: 240530
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F341e5945-39b4-44e2-a1dc-be4e70577262.jpeg
34.120.237.76200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F341e5945-39b4-44e2-a1dc-be4e70577262.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3afa84bffe8905e9191085d281a89637
0c7ae87051649d5fc46578e59484600c9184b59b
7a7e00b0359058de64cb45fbb7e54b279dab70ba81d23c267697fda0e157f2f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F341e5945-39b4-44e2-a1dc-be4e70577262.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4055
x-amzn-requestid: 1b786b76-b4bf-480f-ad87-f024bffa73b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOUE8wIAMFi_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-4524317071a87c374d0884c3;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: o1r-ZlYD51CedvMlPKbKDwX-qsFjVy9s-KatKheGFiGOz8dYbYmKyg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:34:18 GMT
age: 16804
etag: "0c7ae87051649d5fc46578e59484600c9184b59b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c125d22-7470-46da-85af-7621027dbe03.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c125d22-7470-46da-85af-7621027dbe03.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 785c079072174860502c277b03f7743d
e63af885fa20dbd2a49ee44397d8f8c595b1cbcf
f4d748e2e7b16f41af16e3f2450a4823af56dacaacaa7f1a9537f41186c64148
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c125d22-7470-46da-85af-7621027dbe03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8027
x-amzn-requestid: 9c8f833a-bc10-4899-aafb-b6068751f15d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bn08wGsOoAMFaSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637301eb-75b862d5320dfa553466860c;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 03:05:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fbMtJC2Dfg8rDQl7nw16eZf1C1aMGv-3VtcXARXUaZV80TGvps3aAA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 03:53:22 GMT
age: 80460
etag: "e63af885fa20dbd2a49ee44397d8f8c595b1cbcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/sw.js
34.149.204.188404 Not Found 538 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/sw.js
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0d4305f941d59b8c89aa19467d9e9b0e
6bc54fc89c8975bd42219584d98754b65d8fd895
2d002435be4a8b4235e5c1e717ea2552a9b170fe1640652b08d44b5a870b96cb
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /sw.js HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _ga=GA1.3.544724688.1668651260; _gid=GA1.3.212864838.1668651260; _gat_UA-160231695-1=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 02:14:22 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751824; includeSubDomains
content-length: 538
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash e26779de702dfe8bfb350df74ff66b07
67ff81546b8dfe7024570bb8a58ecf61afa4f6f7
ac08f541526d8eb577313b013ec88e6a344ca642c97de954d0418b3821c8f489
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=116218
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 02:14:22 GMT
Etag: "6374bbf8-2d7"
Expires: Fri, 18 Nov 2022 10:31:20 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:20 GMT
Server: nginx
Content-Length: 727
analytics.redlink.com.ar/hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/
45.233.68.25302 Redirect 155 B URL HTTP/1.1 analytics.redlink.com.ar/hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/
IP 45.233.68.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 96a3c98889299dc742cef1e3f837f6d7
5f279dcb9db73fb8b9aa6e4a96ed58559b095aef
de7b0fd139bd0be08cca4b3a25ec21f201959df8acfa555df1e01251276076fa
GET /hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/ HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://analytics.redlink.com.ar
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 17 Nov 2022 02:14:22 GMT
Content-Length: 155
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash 7158b198f6800ef78f60fc771ad9dc97
ff0fe0d4ad27742c42de78b91351d0f495829b59
351bc392ac71b2923d253d6274584eee06115b9d683a0c4bcf07312c33bd0bf1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 02:14:23 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 10:12:16 GMT
Expires: Wed, 23 Nov 2022 10:12:15 GMT
Etag: "ff0fe0d4ad27742c42de78b91351d0f495829b59"
Cache-Control: max-age=601508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1260
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76b4f3dacd7e0b06-OSL
analytics.redlink.com.ar/
45.233.68.25200 OK 246 B URL HTTP/1.1 analytics.redlink.com.ar/
IP 45.233.68.25:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash aac68c3f2973ae6bcf1e154e6bb4ff98
0ca9c79f5f9aef9d79220f109f634c1bc50c05d0
774185757f47228d9b59ce512424a72614e1ffb88e4bc0a9a38141a318021cf1
GET / HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 09 Oct 2015 19:27:42 GMT
Accept-Ranges: bytes
ETag: "0b291c82d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 17 Nov 2022 02:14:22 GMT
Content-Length: 246
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 4ee962a13c68a134448ef49af523fb9f
363510860b74c1fb1cd7f5f71f32c66cfba5591b
5ec7e7fe66d9e21faa4030fc653825e70b5a9580631c9a013b878fd0d59401d1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 02:14:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 21:03:43 GMT
Expires: Sun, 20 Nov 2022 21:03:42 GMT
Etag: "363510860b74c1fb1cd7f5f71f32c66cfba5591b"
Cache-Control: max-age=326358,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76b4f3dad9d9b527-OSL
hb.bancociudad.com.ar/assets/favicon.png
45.233.70.123200 OK 8.9 kB URL HTTP/1.1 hb.bancociudad.com.ar/assets/favicon.png
IP 45.233.70.123:0
File type PNG image data, 322 x 322, 8-bit/color RGBA, non-interlaced\012- data
Hash 25a9870ada58fd297d30493deb73dc07
5621be8ef54b0aa4e108ff9a43c2f51900e7c33d
2bdf4ac46b037d1abce919e168a390a071fd0c32542b116cf6826ea26e6eab1b
GET /assets/favicon.png HTTP/1.1
Host: hb.bancociudad.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 02:14:23 GMT
Content-Type: image/png
Content-Length: 8925
Last-Modified: Fri, 04 Nov 2022 03:03:51 GMT
Connection: keep-alive
ETag: "63648117-22dd"
Expires: Sat, 17 Dec 2022 02:14:23 GMT
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: TS01fe601c=016e5a5cb09c29441cab1b2869ec4c1f340370395b4241a637f8b68a8888502e4ee6bc3f49274ef77d1d8ca232745e3db120d02497; Path=/; Domain=.hb.bancociudad.com.ar
dependentevilarchives.cuidadswe2.repl.co/
34.149.204.188200 OK 0 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/
IP 34.149.204.188:0
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET / HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 02:14:20 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7751826; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2