Overview

URLyummyorchidproperties.realactiv1.repl.co/
IP 34.149.204.188 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-01 04:37:24 UTC
StatusLoading report..
IDS alerts0
Blocklist alert32
urlquery alerts No alerts detected
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-11-30 17:26:15 UTC 74.125.131.156
hb.bancociudad.com.ar (1) 0 No data No data 45.233.68.123 Domain (bancociudad.com.ar) ranked at: 10937
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-30 22:10:37 UTC 142.250.74.46
ocsp.pki.goog (5) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-30 17:12:31 UTC 34.102.187.140
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-01 04:12:44 UTC 142.250.74.40
yummyorchidproperties.realactiv1.repl.co (17) 0 2022-12-01 00:43:08 UTC 2022-12-01 03:41:58 UTC 34.149.204.188 Unknown ranking
r3.o.lencr.org (7) 344 No data No data 23.33.119.27
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-30 17:13:24 UTC 34.117.237.239
ocsp.sectigo.com (1) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 104.18.32.68
analytics.redlink.com.ar (2) 0 2016-10-14 16:51:19 UTC 2022-12-01 03:41:59 UTC 45.233.68.25 Domain (redlink.com.ar) ranked at: 413692
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 44.238.202.79
ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2021-11-02 18:02:09 UTC 104.18.32.68
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad
2022-11-30 2 yummyorchidproperties.realactiv1.repl.co/ Banco Ciudad

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/analytics.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/gtm.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/serviceworker.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/colors.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/runtime.ec2944dd8b20ec (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/ciudad.svg Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/popper.min.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/bootstrap.min.js.descarga Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/jquery-3.5.1.slim.min. (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/polyfills.78e7bb2b516c (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/Roboto-Regular.73f0a88 (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/GuardianTextSans-Regul (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/index_files/GuardianTextSans-Mediu (...) Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/sw.js Phishing
2022-12-01 2 yummyorchidproperties.realactiv1.repl.co/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.149.204.188
Date UQ / IDS / BL URL IP
2023-02-01 05:25:22 +0000 22 - 1 - 0 2301.666j1.repl.co/ 34.149.204.188
2023-02-01 04:02:18 +0000 0 - 0 - 5 marvelouseveryequation.reactiveglobal.repl.co/ 34.149.204.188
2023-02-01 03:19:58 +0000 3 - 0 - 19 virtual--bcbogota.repl.co/ 34.149.204.188
2023-02-01 03:19:29 +0000 3 - 0 - 18 a5eee591-bdb8-45ea-874d-f824b2261fef.id.repl.co/ 34.149.204.188
2023-02-01 03:19:16 +0000 3 - 0 - 19 virtual.bcbogota.repl.co/ 34.149.204.188


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-02-01 06:35:58 +0000 0 - 0 - 3 vbncncfghdfghdfghdfghdfgh.blogspot.de/ 172.217.21.161
2023-02-01 06:32:58 +0000 0 - 1 - 5 intuitive-queen-38.backplaneapp.io/ 35.205.61.67
2023-02-01 06:29:59 +0000 0 - 0 - 2 hacktoolsforrobloxpc.blogspot.com/ 142.250.74.1
2023-02-01 06:28:31 +0000 0 - 0 - 3 kateandjanetroblox.blogspot.li/ 142.250.74.65
2023-02-01 06:26:15 +0000 0 - 0 - 3 bodybrite.com.co/app/Adobpdate.zip 35.193.122.126


Last 4 reports on domain: realactiv1.repl.co
Date UQ / IDS / BL URL IP
2022-12-04 11:59:35 +0000 0 - 0 - 34 yummyorchidproperties.realactiv1.repl.co/ 34.149.204.188
2022-12-01 04:37:24 +0000 0 - 0 - 32 yummyorchidproperties.realactiv1.repl.co/ 34.149.204.188
2022-12-01 04:37:01 +0000 0 - 0 - 37 yummyorchidproperties.realactiv1.repl.co/inde (...) 34.149.204.188
2022-12-01 04:36:41 +0000 0 - 0 - 29 yummyorchidproperties.realactiv1.repl.co/inde (...) 34.149.204.188


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-04 11:59:35 +0000 0 - 0 - 34 yummyorchidproperties.realactiv1.repl.co/ 34.149.204.188
2022-11-17 11:29:29 +0000 0 - 0 - 30 dependentevilarchives.cuidadswe2.repl.co/ 34.149.204.188
2022-11-17 08:42:20 +0000 0 - 0 - 28 dependentevilarchives.cuidadswe2.repl.co/ 34.149.204.188
2022-11-17 05:00:56 +0000 0 - 0 - 32 dependentevilarchives.cuidadswe2.repl.co/ 34.149.204.188
2022-11-17 02:14:31 +0000 0 - 0 - 32 dependentevilarchives.cuidadswe2.repl.co/ 34.149.204.188

JavaScript

Executed Scripts (13)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (51)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Thu, 01 Dec 2022 05:28:00 GMT
Date: Thu, 01 Dec 2022 04:37:13 GMT
Connection: keep-alive

                                        
                                            POST /s/gts1p5/mNCXVKqz4Vg HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9282
Expires: Thu, 01 Dec 2022 07:11:55 GMT
Date: Thu, 01 Dec 2022 04:37:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1573
Cache-Control: max-age=109218
Date: Thu, 01 Dec 2022 04:37:13 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 10:57:31 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: tNUyIWdgFxw9D1NUsS2SzOngnEQqgY8QOVLlIQbUcvC7YoyhEJPd3rMQnAzEBuQ5hn7gJzkRw+o=
x-amz-request-id: A21SE5YK3KBC2Z6Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 03:45:30 GMT
age: 3103
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 04:19:45 GMT
cache-control: public,max-age=3600
age: 1048
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 01 Dec 2022 04:37:13 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-5QM5P4Q HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 04:37:13 GMT
expires: Thu, 01 Dec 2022 04:37:13 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45209
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   45209
Md5:    737b93c158253c0805e93aa3c2f1731f
Sha1:   6711f3116e9d8db521b7bbe79b04626373f78b4e
Sha256: eb2a9f277f237b6ff97f39c876c27c8de42951b91ff57eed3ab9bebdbc44b632
                                        
                                            GET /index_files/analytics.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 50205
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   50205
Md5:    d40531c5e99a6f84e42535859476fe35
Sha1:   a901817d77b2fe5259c298c91bc65c54d7f8a1a9
Sha256: a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /index_files/gtm.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 112339
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   112339
Md5:    a62703f02b9e358ea0ebf5f14b768411
Sha1:   6c9fc592a82fa258015aa72eb2c36594fe51cb96
Sha256: 69e68184ffe4bcbb1643904ffa7edf803bec7cd57d578968b69515a789a72a95

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 04:08:56 GMT
cache-control: public,max-age=3600
age: 1698
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /index_files/serviceworker.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 139
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   139
Md5:    ec431e4821c417259968c9433c173d7a
Sha1:   e20a8ea582c50a6ecd98e38967b6206f3f5464cf
Sha256: bf15ddcaa9d1e8dcc42d385983c30efdec4b85650c6d2452df31979b404e3160

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/colors.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 755
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (755), with no line terminators
Size:   755
Md5:    8a0ccd362c3f22c9cf239d05b210a994
Sha1:   5865d553986f59538f56eed1a27c490a9f6bb0b1
Sha256: 830c8c46ae7149f8c395c44b9089d0a12ccca34449d2a8b1992186b059c43fd9

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/runtime.ec2944dd8b20ec099bf3.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 1451
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1451), with no line terminators
Size:   1451
Md5:    d68ae1d68307abe5cbce649d966e97f1
Sha1:   21109b3561b5a6c3ed51bc3015962f05da8e57b3
Sha256: f6d14a5c40a406c335c7aea3f6983070bb59111b470bdf39bd7e1c3f4618b9f4

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            POST /j/collect?v=1&_v=j96&a=782294164&t=pageview&_s=1&dl=https%3A%2F%2Fyummyorchidproperties.realactiv1.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=aEBAAEABEAAAAC~&jid=469824861&gjid=1551131534&cid=2018820237.1669869433&tid=UA-160231695-1&_gid=1543659130.1669869433&_r=1&gtm=2wgbs05QM5P4Q&z=1480561828 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://yummyorchidproperties.realactiv1.repl.co
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://yummyorchidproperties.realactiv1.repl.co
date: Thu, 01 Dec 2022 04:37:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            GET /index_files/icono-login.png HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: image/png
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 6233
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Size:   6233
Md5:    3060236dd0018dfbc4cb7a6cf0a3ec68
Sha1:   6c8496aa09c8262a23b7923ca8571f93e36b90d8
Sha256: c0e6f30e7bbb291540bdc48ead3ce0c41a9c99cf813e521572225a46215e7931

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
                                        
                                            GET /index_files/ciudad.svg HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 4511
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3283)
Size:   4511
Md5:    c73e5d18223746a44d6d2fc666e9e804
Sha1:   4e0e21ce77d00569449cb264229b347300038783
Sha256: 69c24732e6b7afebfc32b64f5dc465aed7c1e5ae2083d8a4327931618f323f17

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/popper.min.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 19197
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19063)
Size:   19197
Md5:    6cd956453e307bfd2ce4bfb0648b9f7d
Sha1:   a43367193adc1258902e5b68ad0cda6cf0f9ff8f
Sha256: 625b022a42ed5d9c39911e42050f4fd9834ea039af978b7716f7800ade95eb55

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/bootstrap.min.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 50564
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (50277)
Size:   50564
Md5:    46b549bdc90920f18a911f186b9dd75c
Sha1:   3c639c4af5c036a6ee364215bd12c0b12937827d
Sha256: 1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/jquery-3.5.1.slim.min.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 72379
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65245)
Size:   72379
Md5:    767a77430d12bd654d8f0c92cc21298c
Sha1:   75c2ff61e87f9ae41f55f4e845812aad189ab9af
Sha256: c46dc051ce81c4af2b2096abbf885ae4ba7467ff5db0f0106ceee928cf3658a3

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 142683
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   142683
Md5:    050f5593a795beffaae3aa1af2f42c6d
Sha1:   6f09825e9255091665f31ae93fa12c47dae4a4c2
Sha256: e428b9c4a2a312c519cb59eef4b605756f125ed3a53fa975058b737748fb2b47

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=2018820237.1669869433&jid=469824861&gjid=1551131534&_gid=1543659130.1669869433&_u=aEBAAEAAEAAAAC~&z=324478650 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://yummyorchidproperties.realactiv1.repl.co
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         74.125.131.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://yummyorchidproperties.realactiv1.repl.co
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 01 Dec 2022 04:37:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1562
Cache-Control: 'max-age=158059'
Date: Thu, 01 Dec 2022 04:37:14 GMT
Last-Modified: Thu, 01 Dec 2022 04:11:12 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /index_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2 HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.2018820237.1669869433; _gid=GA1.3.1543659130.1669869433; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Thu, 01 Dec 2022 04:37:14 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839019; includeSubDomains
content-length: 64632
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 64632, version 1.0\012- data
Size:   64632
Md5:    73f0a88bbca1bec19fb1303c689d04c6
Sha1:   463a07f5c66bf14e6d9d6e0f6d5e3fd3cb11f4ec
Sha256: 47107401d0adb375ab9aa167f9d62489a849d510e740a307b5a4db60e5db3562

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.2018820237.1669869433; _gid=GA1.3.1543659130.1669869433; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
date: Thu, 01 Dec 2022 04:37:14 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839019; includeSubDomains
content-length: 598
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   598
Md5:    b3b99ae27b0f9d1595377caf7662ba60
Sha1:   6f94700d1525a5856ea877e56071c899c04b2bd9
Sha256: 8657ea34a641da845906401f5f319f1439e128b61009c634c278512ede6242f9

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.2018820237.1669869433; _gid=GA1.3.1543659130.1669869433; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
date: Thu, 01 Dec 2022 04:37:14 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839019; includeSubDomains
content-length: 597
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   597
Md5:    f5bd90043db98c8ce5d4e168322dff1c
Sha1:   8a51d728684c45ca8583e058670662185d012a2a
Sha256: ac8f2b25592bd3b65fa13716577d0c6f3594e6f652bf4663b2330e0aa1dd99e6

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QH0ts7JMg6gjTrz0GXPk+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.238.202.79
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: l62tk50nflqJ7DrwfESV5k5aOls=

                                        
                                            GET /sw.js HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _ga=GA1.3.2018820237.1669869433; _gid=GA1.3.1543659130.1669869433; _gat_UA-160231695-1=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         34.149.204.188
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
date: Thu, 01 Dec 2022 04:37:14 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839019; includeSubDomains
content-length: 538
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   538
Md5:    0d4305f941d59b8c89aa19467d9e9b0e
Sha1:   6bc54fc89c8975bd42219584d98754b65d8fd895
Sha256: 2d002435be4a8b4235e5c1e717ea2552a9b170fe1640652b08d44b5a870b96cb

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:15 GMT
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 10:12:16 GMT
Expires: Wed, 07 Dec 2022 10:12:15 GMT
Etag: "6f104c5df649352b17aca7ed25974dacea697855"
Cache-Control: max-age=602520,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1235
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772920630c97b4ed-OSL


--- Additional Info ---
Magic:  data
Size:   2236
Md5:    448fd7232e74f575525805506589c97e
Sha1:   6f104c5df649352b17aca7ed25974dacea697855
Sha256: 64f3864c601d54e9967253b34c493681e4ce400cbb4450bf1f6d9555ec65b771
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=107647
Date: Thu, 01 Dec 2022 04:37:15 GMT
Etag: "638730fa-2d7"
Expires: Fri, 02 Dec 2022 10:31:22 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:22 GMT
Server: nginx
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 01 Dec 2022 04:37:15 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 21:03:43 GMT
Expires: Sun, 04 Dec 2022 21:03:42 GMT
Etag: "bddf13628f3e8d44cd325b1e4ba93628c1f92516"
Cache-Control: max-age=317786,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 772920631f1eb51d-OSL

                                        
                                            GET /hblogin/p1.htm?url=https://yummyorchidproperties.realactiv1.repl.co/ HTTP/1.1 
Host: analytics.redlink.com.ar
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yummyorchidproperties.realactiv1.repl.co
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         45.233.68.25
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
                                        
Location: https://analytics.redlink.com.ar
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 01 Dec 2022 04:37:15 GMT
Content-Length: 155


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   155
Md5:    96a3c98889299dc742cef1e3f837f6d7
Sha1:   5f279dcb9db73fb8b9aa6e4a96ed58559b095aef
Sha256: de7b0fd139bd0be08cca4b3a25ec21f201959df8acfa555df1e01251276076fa
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Thu, 01 Dec 2022 05:21:22 GMT
Date: Thu, 01 Dec 2022 04:37:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Thu, 01 Dec 2022 05:21:22 GMT
Date: Thu, 01 Dec 2022 04:37:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Thu, 01 Dec 2022 05:21:22 GMT
Date: Thu, 01 Dec 2022 04:37:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Thu, 01 Dec 2022 05:21:22 GMT
Date: Thu, 01 Dec 2022 04:37:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Thu, 01 Dec 2022 05:21:22 GMT
Date: Thu, 01 Dec 2022 04:37:15 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb560dfdf-cffc-469d-bc98-e6eed575f5ab.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6509
x-amzn-requestid: a86cb68e-5c74-4945-acbc-79d10f7c6c7a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMPFOEIAMFYnA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe7-006677c06331c3e014ab143e;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tlB6fhdDRjY_6gEC8QWNa8BLapBlyNLrx2I2fyE0M36oIS4cpEXDQw==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:58 GMT
age: 24437
etag: "838faca0991563ccc5756f65d5bfd6c3d4d88372"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6509
Md5:    c2f2f7c9706a549fd41ba29135ce83e1
Sha1:   838faca0991563ccc5756f65d5bfd6c3d4d88372
Sha256: f35f6a43751ff81f220789a2aa352c6abbd2f52b3beabff738cd11761b1923da
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 16038
x-amzn-requestid: 925134ee-dd35-45ed-8da7-d60c9c484993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80EHboAMFtmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-48de287757e82632291365ee;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I8qQQUMSVzFmXqjWM1n_F1XEE-ZQcpEF81OwJgf9i3Q5M8XiFAa8Zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
age: 24315
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   16038
Md5:    ffd12f9c423ffc627d9e3b3145944fe4
Sha1:   5cf9a7a784952e1bb0cbe499104f1774b1269d08
Sha256: a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 08:50:17 GMT
age: 71218
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4762
Md5:    d2dd5a4bcfd47db8f38544bf39ce3031
Sha1:   fa2217bae05b7beca2e12597eaad835298276b82
Sha256: 3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff41bace1-a7a5-42ae-b255-862c9cbac9de.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10437
x-amzn-requestid: 2a8183c4-47ec-42bb-8e67-3e742dc3750c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb0YpEeooAMFfvg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cdd0-2014fd4d49dcd4087bf1db4d;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:40:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Q9y5-OF59ODaZRd9YFFdM2rIH0bYYyIT40rCwr8cBwBQd0GOqtNobg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 22:08:51 GMT
age: 23304
etag: "99b5ef2d6a4d1a1251a06d9d9f989b01d089a8d1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10437
Md5:    291127b670135b42b6e9687aa2a13237
Sha1:   99b5ef2d6a4d1a1251a06d9d9f989b01d089a8d1
Sha256: 49b082a738bcd15a0bb4e9f96a180797ffcfa368977ac1927df882a0343664d3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9613
x-amzn-requestid: a46cc458-2e28-4ca7-b223-ba66256caef1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTPfmEmKoAMFZvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63845f96-7ecee5764c4a40e50e5b1f98;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 07:13:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6p5kV3OCTlaiLWEa9wyeRJOYoxPNZwLhXGIbEnymaufjKL246zfrhw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 06:20:48 GMT
age: 80187
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9613
Md5:    b92721cbe24623f1713a5248d6a7c1b2
Sha1:   3628390c62642dcc375b28f58c9b48180c4abd73
Sha256: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F02cf22ee-ded9-4b9d-b5d8-ee6690ac9f45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10985
x-amzn-requestid: ef9e5eb9-b7b3-41e9-9837-a5979ab35d94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV91OFzsoAMFcew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63857687-53b152c0027d26e52383e27e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 03:03:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F_ZBWwAOPbEjvMD1ChrgN9QYUyyFYdtRT6CcX6gviowmeinPRgVtnA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 04:19:21 GMT
age: 1074
etag: "0660a548a491d4a58ca2246f094f0553437c3f61"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10985
Md5:    f07f254d44ff2fb86ee22cee39ef3eb0
Sha1:   0660a548a491d4a58ca2246f094f0553437c3f61
Sha256: 859b2416d638b1dc91ff563800517124b38d45b4c5db99e21539c1700829dbe4
                                        
                                            GET /assets/favicon.png HTTP/1.1 
Host: hb.bancociudad.com.ar
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.233.68.123
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 01 Dec 2022 04:37:15 GMT
Content-Length: 8925
Last-Modified: Fri, 04 Nov 2022 03:03:51 GMT
Connection: keep-alive
ETag: "63648117-22dd"
Expires: Sat, 31 Dec 2022 04:37:15 GMT
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: TS0196f39a=01aef80de2bce9b87eb85553ed0e25a2348f3770a9bc0ecd5c582e2b00a4a53f6035eca4df28bf9db64eaba8bc822445b60dfac311; Path=/; Domain=.hb.bancociudad.com.ar


--- Additional Info ---
Magic:  PNG image data, 322 x 322, 8-bit/color RGBA, non-interlaced\012- data
Size:   8925
Md5:    25a9870ada58fd297d30493deb73dc07
Sha1:   5621be8ef54b0aa4e108ff9a43c2f51900e7c33d
Sha256: 2bdf4ac46b037d1abce919e168a390a071fd0c32542b116cf6826ea26e6eab1b
                                        
                                            GET / HTTP/1.1 
Host: analytics.redlink.com.ar
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yummyorchidproperties.realactiv1.repl.co
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         45.233.68.25
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Last-Modified: Fri, 09 Oct 2015 19:27:42 GMT
Accept-Ranges: bytes
ETag: "0b291c82d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 01 Dec 2022 04:37:15 GMT
Content-Length: 246


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size:   246
Md5:    aac68c3f2973ae6bcf1e154e6bb4ff98
Sha1:   0ca9c79f5f9aef9d79220f109f634c1bc50c05d0
Sha256: 774185757f47228d9b59ce512424a72614e1ffb88e4bc0a9a38141a318021cf1
                                        
                                            GET / HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Banco Ciudad
    - fortinet: Phishing
                                        
                                            GET /index_files/styles.542f8738520c301b6503.css HTTP/1.1 
Host: yummyorchidproperties.realactiv1.repl.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yummyorchidproperties.realactiv1.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         34.149.204.188
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
date: Thu, 01 Dec 2022 04:37:13 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=5839020; includeSubDomains
content-length: 240530
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Banco Ciudad