3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
308 Permanent Redirect 101 B URL HTTP/1.1 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
IP
File type HTML document, ASCII text
Hash 832a93d61ebfedc3974442d08e82018e
0a87d7f9532ff93492dd8c4d419a9154ffb8e14d
1152c3417cf0ad860d391851099b0828c6a820fe09010caef30cb6724f8c4bfd
Analyzer Verdict Alert fortinet Phishing
GET /login.php HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 308 Permanent Redirect
Content-Type: text/html; charset=utf-8
Location: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Replit-Cluster: global
Date: Mon, 06 Feb 2023 02:40:32 GMT
Content-Length: 101
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13088
Expires: Mon, 06 Feb 2023 06:18:41 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16289
Expires: Mon, 06 Feb 2023 07:12:02 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2933
Expires: Mon, 06 Feb 2023 03:29:26 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 02:34:01 GMT
content-type: application/json
age: 392
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zTVz6XDenjBozs6KkK0YMMFf4HHfUxZAruKO4xqRPeLyTJDN9sne9j2tTQqX0FLibV76D5nvSD0=
x-amz-request-id: WK1Y0EB1M2MB766M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 02:24:46 GMT
age: 947
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 200bf219423662e1e5da9e69866821ab
2380cbbf34055f4d98863ac31ed6e072be9ecdcc
c73fc1f65685428f354198a05b74d1fbe5ff8d5cca4d531f94a0dae93e15baba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C73FC1F65685428F354198A05B74D1FBE5FF8D5CCA4D531F94A0DAE93E15BABA"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2512
Expires: Mon, 06 Feb 2023 03:22:25 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 02:40:33 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 01:51:17 GMT
age: 2956
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
assets.adobedtm.com/37617e04bc40/148ea22e9d02/ec923150e907/EXcbed6db11d6a41a3a0d1449d9393f83d-libraryCode_source.min.js
200 OK 14 kB URL HTTP/2 assets.adobedtm.com/37617e04bc40/148ea22e9d02/ec923150e907/EXcbed6db11d6a41a3a0d1449d9393f83d-libraryCode_source.min.js
IP
File type ASCII text, with very long lines (32763)
Hash 07609db7370c6ecff6f346354028183b
ab050dbacfecc32fdcaa13075ceab0ac45abed38
baf7539964d4c4c7e50a9e648c4784cc68a6ead55456c8e6a121c52723b12184
GET /37617e04bc40/148ea22e9d02/ec923150e907/EXcbed6db11d6a41a3a0d1449d9393f83d-libraryCode_source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "5e8026743d1ffd881e96c1ae9ede6feb:1673266904.704351"
last-modified: Mon, 09 Jan 2023 12:21:44 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 06 Feb 2023 03:40:33 GMT
date: Mon, 06 Feb 2023 02:40:33 GMT
content-length: 14004
access-control-allow-origin: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/37617e04bc40/148ea22e9d02/launch-b85999266f92.min.js
200 OK 185 kB URL HTTP/2 assets.adobedtm.com/37617e04bc40/148ea22e9d02/launch-b85999266f92.min.js
IP
File type ASCII text, with very long lines (32760)
Size 185 kB (184562 bytes)
Hash 036c46b3d941d1898bd2e564165b5a7d
cc27e0be4e3cd4acc4cc857990c6c5336a973219
a7c3206e1dc942f5bcf2698fb4840f63fc654be944c39a42237c80d8bc7820a9
GET /37617e04bc40/148ea22e9d02/launch-b85999266f92.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9459bb995a8cdd1f94d082eba5685570:1673266903.699655"
last-modified: Mon, 09 Jan 2023 12:21:43 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 06 Feb 2023 03:40:33 GMT
date: Mon, 06 Feb 2023 02:40:33 GMT
content-length: 184562
access-control-allow-origin: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6914
Expires: Mon, 06 Feb 2023 04:35:47 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/grille-705ed221746a2c5c6985f0a6326d17ed.js
200 OK 2.1 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/grille-705ed221746a2c5c6985f0a6326d17ed.js
IP
Hash 705ed221746a2c5c6985f0a6326d17ed
65fef6ad7dea58feaba07e6402d2909f323d84d0
4e12df9c551e9fc5202dc5be74df6cad94a7cf590abb88d165d448fdbd927395
Analyzer Verdict Alert fortinet Phishing
GET /common/js/grille-705ed221746a2c5c6985f0a6326d17ed.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 2116
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/threatMetrix/bjtdzi1212.js
200 OK 2.8 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/threatMetrix/bjtdzi1212.js
IP
File type ASCII text, with very long lines (2825), with no line terminators
Hash 6367d9a9f75fbb1457ab74de0d3d58b0
063fe6df96477ea9b1e4aad77e5890488b1497d4
2fa90f2efcf345b936a95809f58499ada6277c089fe7908a70090850fbccaa5e
Analyzer Verdict Alert fortinet Phishing
GET /common/threatMetrix/bjtdzi1212.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 2825
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/particuliers/min/cas.min.js
200 OK 4.5 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/particuliers/min/cas.min.js
IP
File type ASCII text, with very long lines (4510)
Hash 2f26519d3390b945c1a682f562fc4d45
72e5187d392c5be40d9ec50eedf24d195d3ee709
ec8337d829f7b5f1e4b93e4f210922bba59fca93ce09ec73072c5fcc54d576ae
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/script/particuliers/min/cas.min.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 4547
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/mabanque/js/publication-e4070c51eb28c1fd29d9698714cd783f.js
200 OK 9.1 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/mabanque/js/publication-e4070c51eb28c1fd29d9698714cd783f.js
IP
Hash e4070c51eb28c1fd29d9698714cd783f
c9dc5ff7d210da09d0b08e82d402a037dfbd5c27
d69bf1cb590c5064e597319ba8ca627df0709858e4ae40d63f9cb549fc5e3964
Analyzer Verdict Alert fortinet Phishing
GET /mabanque/js/publication-e4070c51eb28c1fd29d9698714cd783f.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 9087
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/generique/satelliteLoader.js
200 OK 4.5 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/generique/satelliteLoader.js
IP
File type HTML document, ASCII text
Hash df345621c0b7dc9afa26121c52fad00d
b0c316cf8a54a34fc69411bc069cd6fe44362a52
8636c0ef48fadbb158b5a730a4cd0cf28cbcf391271562a1173d765499a60ea6
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/script/generique/satelliteLoader.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 4467
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js
404 Not Found 582 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e210df90ca034123cfe8a052e47485cb
8fd6867356b15fe87e6c23cc44c4751c8a99b98c
e3e7504124f1ec13c8ceb61b1626e86d80d37919c957a8fd502344e51a75241a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 582
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/keepalive-9d8dc0169810b25ddc72bd43c32028e1.js
200 OK 1.6 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/keepalive-9d8dc0169810b25ddc72bd43c32028e1.js
IP
Hash 9d8dc0169810b25ddc72bd43c32028e1
0d835b7a6b43617ddc2dc7838f414926cccf646e
c3081eb7ad1abe25c308cbf596d9a3a4cf869311677021f098e866f3834417d3
Analyzer Verdict Alert fortinet Phishing
GET /common/js/keepalive-9d8dc0169810b25ddc72bd43c32028e1.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 1608
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/generique/DependanceSatelliteLoader.js
200 OK 1.1 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/script/generique/DependanceSatelliteLoader.js
IP
Hash 4518ffbc47a13f94974367a162418497
10920d45ceebea1792a7e38463d06bbc4a5dd361
1525b785a6b073047ae8e7727cd5b146489c6893607757da099a14c903bfe7d2
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/script/generique/DependanceSatelliteLoader.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 1119
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/threatMetrix/pfbp.js
200 OK 455 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/threatMetrix/pfbp.js
IP
Hash 7f68b34e64b2a103d3b5805744720a22
8b33af78f4bdc91ffa7db1db322bcd760f6b3753
aed89694e48821648f93b2fd812a01e9f1e4ac7e63c3ca3907dc074cb69a3603
Analyzer Verdict Alert fortinet Phishing
GET /common/threatMetrix/pfbp.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 455
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/urgence.svg
200 OK 600 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/urgence.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (338)
Hash 77ca1eb8178358fe857aec08dc511404
992d2bf30df0591abc44fdc3d592951fa99f4d2b
52b355e1ce355a40ed04bc7930bbe0f7b9863c5c3db9e9c769f3e583f52c3177
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/image/generique/urgence.svg HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 600
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-carte-bloqu-e.png
200 OK 3.5 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-carte-bloqu-e.png
IP
File type PNG image data, 40 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash fd951519695291388f2049aa1167ba62
cafc7c5c0f50efcbd97fa980037b9c8625efab66
052502d678d3e394ab3ae793bf2c6a61a9b5b8d40ff9a2af93e38a10105efbfe
GET /rsc/contrib/image/generique/picto-carte-bloqu-e.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 3532
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-giro-bpf.svg
200 OK 1.1 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-giro-bpf.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (661)
Hash c50c65bf8f82c30a6c1ab6cd4931f887
a837e07a669c0624264ab2015810f761735d4bc6
6b32c695ff289891fa9d948c836625d81cd6146b85fab955b572cfcd4e294f8e
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/image/generique/picto-giro-bpf.svg HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 1112
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque.png
404 Not Found 579 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cb7e47cba1d831b44219e56301931f04
415f465cf4a87d77b197d283e36da2cce753386c
fe5022e4f2dd1773b311d2bb877b5042faa3b09a6c95605a665ee6dde1163c7c
GET /rsc/contrib/image/generique/opposer-cheque.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 579
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte.png
404 Not Found 577 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f90f90b7953ccafbd53147dae8b2b948
5a091a36447ce79b80010228268a1734f7ce51d0
e86ca1cabf5e595a5439a01f5be7b84b67bba84f437513ccde284182fa02f323
GET /rsc/contrib/image/generique/oposer-carte.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 577
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-giro.svg
200 OK 1.1 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/picto-giro.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (662)
Hash eba020e4b21c30a42e5d619318c75c16
63450c7f2d8dea1bbc9876f42fe0118a88ad80e4
755817d0cd3fbbb17a05ad9f8d601632e46fe126a501b37455c52a7049b30f00
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/image/generique/picto-giro.svg HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 1111
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 4566ff0f4aea5f2af18cc95ebb41cf5e
cd1c0e6e42c7a4c6a7c15d39efdca4885a3ce215
fe17500109c8553d46aebdd59e3dd58dff644154a816ade09b24f2d8f75c0f3c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "FE17500109C8553D46AEBDD59E3DD58DFF644154A816ADE09B24F2D8F75C0F3C"
Last-Modified: Sun, 05 Feb 2023 16:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Mon, 06 Feb 2023 03:40:33 GMT
Date: Mon, 06 Feb 2023 02:40:33 GMT
Connection: keep-alive
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte-bpf.png
404 Not Found 581 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b5a51e8ede5126e089b8126a5b37fbda
d2e86c14206d64548902a4a1b6007e8291320c6e
0ce7b05c93e1c63e44f8eb9fb5a603d21ffbba09cb825e5ecfe31e074e4e196c
GET /rsc/contrib/image/generique/oposer-carte-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 581
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque-bpf.png
404 Not Found 583 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 511cce545822b0a5c841b0c8200cfb53
b62b2474a5cc9081a653d39356e88bfeff2d8ec6
66759427abff628880c6646ff748eb6201c260ac6b1752529c8a8d09dddfd585
GET /rsc/contrib/image/generique/opposer-cheque-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 583
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/debloquer-carte-bpf.png
200 OK 3.8 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/debloquer-carte-bpf.png
IP
File type PNG image data, 45 x 36, 8-bit/color RGBA, interlaced\012- data
Hash ea7fd77533b4e5193894e0cc3c575f11
c9b2b2e22d750232ecd7fd18aadae387306db7c6
613fea59d1d4bfe6ef9b5553eaa4e4a3c5cfb2a7e122fc947b55e074ac325f4d
GET /rsc/contrib/image/generique/debloquer-carte-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 3774
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement.png
404 Not Found 584 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e1498120e617aa02c32d957de103b1ec
a762cf73362f3a8fd202dd0a357a497744ae55e8
7903fdbea7c3b35eb1ec80574dc082bb345ae5e11a2b41acbbfc8e2dd29b36ac
GET /rsc/contrib/image/generique/opposer-prelevement.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 584
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png
404 Not Found 625 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7fb730c26aaac9fe0f246c3b522d6ac5
dbab0283fc48ea76148123674a0858a62c7ce6ab
1934b579b8f19d02948f705a98c9b206ae0fcafd9994cd3550149254b000edfc
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 625
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3deebf46bf50c871cd8d32f9e37b5717
3d36994619039050b6d4457ff883af7b39568b67
823e32fe76e78fcf59f6a8c9d97e6f1b086e571c0c35b5f801424ec6b30b44b1
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png
404 Not Found 610 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 559fcd36f7f488fbeeff3dfa5dd1bf16
93316dc0d659e3489993da403e584dfeee25276f
f02f767f5be0cdfee8f3ec0b08ab438b18bbf0592d840deb71d3d735cd1af4b3
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 610
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement-bpf.png
404 Not Found 588 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d389e0c3d71b3c9ede36874bb0b43dc2
0cae28dee5c7fbada837cff64b06e1c8a97cf56b
a5afa7c760e0a3e8060f3f290ff1e5597c2a4918b3205cb4389d4ad4b7b56eb2
GET /rsc/contrib/image/generique/opposer-prelevement-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 588
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png
404 Not Found 611 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 403ad9a4485f0e7e673fb27144e0c8b6
b98c2230cd096915a5a2feac96c2589e5c70a9fa
6218ad51dac3c4cdda010f6b969749e2efe2e85fe6b43e01979656beaa2d7ed3
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 611
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f8b70aedf0a56d494d4cf93c9e88c9a0
598d626cedc138bbb21b1dfdc6e472e0123ce3c3
04f065101920da50486ec9506cb9d233fbd0519671c43dbc0dd51f28067d6321
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-mobileo.png
404 Not Found 607 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-mobileo.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 401ec6f834846d3dc1f017ad7fe19f0f
7eb60708e2f9691de853aa252583edb1d1e5f6db
c0f59e66b889dce8935bfc96082b40b4f3cdc8136c4952fe24bd2611dbd4824e
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-mobileo.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 607
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0a51270449e2ce571a0f3c6f9cf005b7
7870c9b709562eb7acbe18ea07f13254264ec8a3
70f1d7e762d145af998942ab9c03c697b628757243e879c52199327eb3dcc526
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png
404 Not Found 610 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f8bc4ce6721c63505e4ed5605d5e54d2
3e0b024f80bb4a70c089ea663460c716af02e1fe
38473e62b6693a270e2cde707b0833ade712326a4016c9ef0932ba8648615019
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 610
X-Firefox-Spdy: h2
content.connexion-mabanque.bnpparibas/bwmohyju72uolwuc.js?idi24qub4l70p9xk=cco37scf&6gg9xeofwodfgw2o=4add1b58-e81e-4435-9dfd-ab0d9fe25553&sw7uhingpmzksnn3=101
200 OK 13 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/bwmohyju72uolwuc.js?idi24qub4l70p9xk=cco37scf&6gg9xeofwodfgw2o=4add1b58-e81e-4435-9dfd-ab0d9fe25553&sw7uhingpmzksnn3=101
IP
File type ASCII text, with very long lines (15506)
Hash 90c2c7d251c174bc5be493813ac3e511
69df4001d2c0156922c395616673abeda4213523
1f3077d6573151d420a68d87c51f9d5b621879284957c31e6b6c2bd04e4ed689
GET /bwmohyju72uolwuc.js?idi24qub4l70p9xk=cco37scf&6gg9xeofwodfgw2o=4add1b58-e81e-4435-9dfd-ab0d9fe25553&sw7uhingpmzksnn3=101 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:33 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67; Max-Age=33696000; Version=1; HttpOnly; Path=/; Secure; SameSite=None;
P3P: CP=IVAa PSAa
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/css/style.css
200 OK 46 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/css/style.css
IP
File type assembler source, Unicode text, UTF-8 text
Hash d94dee76f198c93b9f11703574471ed9
ccc866ef8a4fb8e0bb4b715ffcb5a82bc079f9f4
b32d4687be628c9dc9ca03f0b3803ec50491074205034af27928c90bb359addb
GET /rsc/contrib/identification/src/themes/mabanque/css/style.css HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 46328
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zJJSDs+OJYd4pLNPecT77Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uR6FlwgYxkZ3j7VZirEoOHn3keg=
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/particuliers/cas-footer-part.css
200 OK 82 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/particuliers/cas-footer-part.css
IP
File type ASCII text, with very long lines (53186)
Hash 49a70ffbda9c075a82b34cdc0b9294dc
0ead6df0d0b4ab1ec884d1620f4e675ca680d7fa
fd6c21120b6eeba8cc78aa02e2cc6f14f8a6b8a567292b4609dffbba71378afd
GET /rsc/contrib/css/particuliers/cas-footer-part.css HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 82086
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/particuliers/cas-header-part.css
200 OK 196 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/particuliers/cas-header-part.css
IP
File type ASCII text, with very long lines (53169)
Size 196 kB (195858 bytes)
Hash 346f67b2d21a3d6dc3944d1b309c613f
fbecab0f56928efb2e8b9702e0c4bc7031ef0760
822013e19b44242e8d215ab42fbf7b87ae86ef86c705b90c722b4c0cb07d2084
GET /rsc/contrib/css/particuliers/cas-header-part.css HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 195858
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/01_jquery-3.3.1-6a07da9fae934baf3f749e876bbfdd96.js
200 OK 272 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/01_jquery-3.3.1-6a07da9fae934baf3f749e876bbfdd96.js
IP
Size 272 kB (271751 bytes)
Hash 6a07da9fae934baf3f749e876bbfdd96
46a436eba01c79acdb225757ed80bf54bad6416b
d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
Analyzer Verdict Alert fortinet Phishing
GET /common/js/01_jquery-3.3.1-6a07da9fae934baf3f749e876bbfdd96.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
content-length: 271751
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js
404 Not Found 582 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e210df90ca034123cfe8a052e47485cb
8fd6867356b15fe87e6c23cc44c4751c8a99b98c
e3e7504124f1ec13c8ceb61b1626e86d80d37919c957a8fd502344e51a75241a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/cas-8da6e3f4dedbd2a8e537fcf64deb8c38.js HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 582
X-Firefox-Spdy: h2
content.connexion-mabanque.bnpparibas/IBmpBiExJbHYZD5A?3bd3347632680a70=TCJVZb5hqAtv6njLg5ctRyeUXc6wCiPLJ9PcExZ9hZJh4BRH7mz2uLiNncyFGWCNW0VjCo6CMxZOYHTMNK0u7DSSPOBUy_uZCoi0taIWiHwqlf9XWM2izoMm9WIX12FCULsoxfbpdCA0ZCXENm0WcUxCSk0&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
200 OK 5.9 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/IBmpBiExJbHYZD5A?3bd3347632680a70=TCJVZb5hqAtv6njLg5ctRyeUXc6wCiPLJ9PcExZ9hZJh4BRH7mz2uLiNncyFGWCNW0VjCo6CMxZOYHTMNK0u7DSSPOBUy_uZCoi0taIWiHwqlf9XWM2izoMm9WIX12FCULsoxfbpdCA0ZCXENm0WcUxCSk0&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (332), with CRLF, LF line terminators
Hash 06922869345a2999e547266659afcd56
728abdba0cd91b0d35156f1c3ed1054371190228
091596aa3f1964f0c5f893504a62c9ffd9e58fa91281b7c1d55ba717e0386afe
GET /IBmpBiExJbHYZD5A?3bd3347632680a70=TCJVZb5hqAtv6njLg5ctRyeUXc6wCiPLJ9PcExZ9hZJh4BRH7mz2uLiNncyFGWCNW0VjCo6CMxZOYHTMNK0u7DSSPOBUy_uZCoi0taIWiHwqlf9XWM2izoMm9WIX12FCULsoxfbpdCA0ZCXENm0WcUxCSk0&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:34 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-UA-Compatible: IE=Edge
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5928
Keep-Alive: timeout=2, max=99
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque.png
404 Not Found 579 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cb7e47cba1d831b44219e56301931f04
415f465cf4a87d77b197d283e36da2cce753386c
fe5022e4f2dd1773b311d2bb877b5042faa3b09a6c95605a665ee6dde1163c7c
GET /rsc/contrib/image/generique/opposer-cheque.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 579
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte.png
404 Not Found 577 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f90f90b7953ccafbd53147dae8b2b948
5a091a36447ce79b80010228268a1734f7ce51d0
e86ca1cabf5e595a5439a01f5be7b84b67bba84f437513ccde284182fa02f323
GET /rsc/contrib/image/generique/oposer-carte.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 577
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque-bpf.png
404 Not Found 583 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-cheque-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 511cce545822b0a5c841b0c8200cfb53
b62b2474a5cc9081a653d39356e88bfeff2d8ec6
66759427abff628880c6646ff748eb6201c260ac6b1752529c8a8d09dddfd585
GET /rsc/contrib/image/generique/opposer-cheque-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 583
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png
404 Not Found 625 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7fb730c26aaac9fe0f246c3b522d6ac5
dbab0283fc48ea76148123674a0858a62c7ce6ab
1934b579b8f19d02948f705a98c9b206ae0fcafd9994cd3550149254b000edfc
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-maison.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 625
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png
404 Not Found 611 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 403ad9a4485f0e7e673fb27144e0c8b6
b98c2230cd096915a5a2feac96c2589e5c70a9fa
6218ad51dac3c4cdda010f6b969749e2efe2e85fe6b43e01979656beaa2d7ed3
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-voiture-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 611
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte-bpf.png
404 Not Found 581 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/oposer-carte-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b5a51e8ede5126e089b8126a5b37fbda
d2e86c14206d64548902a4a1b6007e8291320c6e
0ce7b05c93e1c63e44f8eb9fb5a603d21ffbba09cb825e5ecfe31e074e4e196c
GET /rsc/contrib/image/generique/oposer-carte-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 581
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement.png
404 Not Found 584 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e1498120e617aa02c32d957de103b1ec
a762cf73362f3a8fd202dd0a357a497744ae55e8
7903fdbea7c3b35eb1ec80574dc082bb345ae5e11a2b41acbbfc8e2dd29b36ac
GET /rsc/contrib/image/generique/opposer-prelevement.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 584
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3deebf46bf50c871cd8d32f9e37b5717
3d36994619039050b6d4457ff883af7b39568b67
823e32fe76e78fcf59f6a8c9d97e6f1b086e571c0c35b5f801424ec6b30b44b1
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-voiture.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement-bpf.png
404 Not Found 588 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/opposer-prelevement-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d389e0c3d71b3c9ede36874bb0b43dc2
0cae28dee5c7fbada837cff64b06e1c8a97cf56b
a5afa7c760e0a3e8060f3f290ff1e5597c2a4918b3205cb4389d4ad4b7b56eb2
GET /rsc/contrib/image/generique/opposer-prelevement-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 588
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png
404 Not Found 610 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 559fcd36f7f488fbeeff3dfa5dd1bf16
93316dc0d659e3489993da403e584dfeee25276f
f02f767f5be0cdfee8f3ec0b08ab438b18bbf0592d840deb71d3d735cd1af4b3
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-maison-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 610
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f8b70aedf0a56d494d4cf93c9e88c9a0
598d626cedc138bbb21b1dfdc6e472e0123ce3c3
04f065101920da50486ec9506cb9d233fbd0519671c43dbc0dd51f28067d6321
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-cles-QA.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
200 OK 224 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (391), with CRLF, LF line terminators
Size 224 kB (224532 bytes)
Hash d94d0447ca7e8979573da380bf3834a9
9b7af260f141aac896a1bb11e2ae5429fb709e96
8c394543a09ee150480a3b24554d4c3086af42b2b11a0857ca275dbb27226f88
Analyzer Verdict Alert fortinet Phishing
GET /login.php HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:33 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042042; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png
404 Not Found 626 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0a51270449e2ce571a0f3c6f9cf005b7
7870c9b709562eb7acbe18ea07f13254264ec8a3
70f1d7e762d145af998942ab9c03c697b628757243e879c52199327eb3dcc526
GET /rsc/contrib/html/particuliers/infographies/assurance/espace-sinistre/images/picto-mobileo.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 626
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png
404 Not Found 610 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f8bc4ce6721c63505e4ed5605d5e54d2
3e0b024f80bb4a70c089ea663460c716af02e1fe
38473e62b6693a270e2cde707b0833ade712326a4016c9ef0932ba8648615019
GET /rsc/contrib/html/bpf/infographies/espace-sinistre/images/picto-cle-QA-bpf.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 610
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/logo-bnpp.png
404 Not Found 574 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/generique/logo-bnpp.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 570cd28247e5a42a79315ceaed4b525b
e0b44c32e2005bf41c27f4dbd30dc60bce40fbe8
d4ad97c2b591c23feff9f1fe8f6ef02123f333245bdb2432e554b768452e4814
GET /rsc/contrib/image/generique/logo-bnpp.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:34 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 574
X-Firefox-Spdy: h2
content.connexion-mabanque.bnpparibas/yN64xWMYV_6HDB6u?a09ccd3b50d4c0ff=SMAog3T-k76SxvF-pT1uxaqw7oDqdbjuF1pmgUcSEppdZsSkLOgStUZUAZmyGTmWEIqYBfZqSAEXympD68KRxp-c4DQbbV-o-PKYknBClCYBo50lXE0UPou3BDNXU9irU7DELRRtE5K6B77XGcLKhsWKLOgSiHuv5E91tl3PZN0o
200 OK 30 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/yN64xWMYV_6HDB6u?a09ccd3b50d4c0ff=SMAog3T-k76SxvF-pT1uxaqw7oDqdbjuF1pmgUcSEppdZsSkLOgStUZUAZmyGTmWEIqYBfZqSAEXympD68KRxp-c4DQbbV-o-PKYknBClCYBo50lXE0UPou3BDNXU9irU7DELRRtE5K6B77XGcLKhsWKLOgSiHuv5E91tl3PZN0o
IP
File type ASCII text, with very long lines (19811)
Hash e0b5c429d45b33c00852c5e4d79bf489
0f99b5819e1964cdde9c7c7421f2fac422022d53
2bfae49503ef2c4eadb349ea5e69fb183bc339217477c6d711e34c1f0e0c5c3a
GET /yN64xWMYV_6HDB6u?a09ccd3b50d4c0ff=SMAog3T-k76SxvF-pT1uxaqw7oDqdbjuF1pmgUcSEppdZsSkLOgStUZUAZmyGTmWEIqYBfZqSAEXympD68KRxp-c4DQbbV-o-PKYknBClCYBo50lXE0UPou3BDNXU9irU7DELRRtE5K6B77XGcLKhsWKLOgSiHuv5E91tl3PZN0o HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/IBmpBiExJbHYZD5A?3bd3347632680a70=TCJVZb5hqAtv6njLg5ctRyeUXc6wCiPLJ9PcExZ9hZJh4BRH7mz2uLiNncyFGWCNW0VjCo6CMxZOYHTMNK0u7DSSPOBUy_uZCoi0taIWiHwqlf9XWM2izoMm9WIX12FCULsoxfbpdCA0ZCXENm0WcUxCSk0&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:34 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 37eee64c2ade5d7b
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=98
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/4shx3e7cIauX-9gG?c0622195562ceb5d=Rrp2iV0FuSKcv5tPVJVVlG_ud-NGopFERjy2tveqRoy634J-m8HNosFaYirxkQjvIK8nFEYBuETxnGfMvrT26St2PlprP3FPKtm3InNLs8Hcnq-eh2WHOuWyHNCxXs-gRjkQmcaTjZTqD6rZt5uNsa-aPCoIHHWC5EIJyrKxXc0CTdtVQU-ODSypQLBVeqzS7EDrk85czezBlZt8ciYgR29osZk&sera_parametere=VUdYUgBVUVoBUFxdAFICBwBWBlMBDwJQV1YHXQJRBlEDAAEHBgAHUgMAV0NGFwoLXUcQERYTBycXViZAAiASUANdFgAJU1kGXBUXQAYgElVxB0BSIRMGU1oOFxFGQQQmFgAnQFJyEgdbXAddAFNRAVcBUAAABAdXB1FdXAMGVVQHVVBRUAINAFZRAgZTXAdQUQBDCwpYVwYPUlMAUAEBVlAFBAEAA1BUUEcOFghUTwMHAQMEUA8NUQFZVlIAVVQEUQIGUAMEB1RWVQFWBVIBUgYPBAYBAwVFUwhZVAVSAVoVXgxYSAcSE1tcXVwMXQ9EW1xYQwcLcgpABAIKTUJVFA4GVVBDVFsQDy0NC0AcEQFRChEBH2lXAl4NBgRWDxEHRwpcVA%3D%3D&count=0&max=0
200 OK 61 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/4shx3e7cIauX-9gG?c0622195562ceb5d=Rrp2iV0FuSKcv5tPVJVVlG_ud-NGopFERjy2tveqRoy634J-m8HNosFaYirxkQjvIK8nFEYBuETxnGfMvrT26St2PlprP3FPKtm3InNLs8Hcnq-eh2WHOuWyHNCxXs-gRjkQmcaTjZTqD6rZt5uNsa-aPCoIHHWC5EIJyrKxXc0CTdtVQU-ODSypQLBVeqzS7EDrk85czezBlZt8ciYgR29osZk&sera_parametere=VUdYUgBVUVoBUFxdAFICBwBWBlMBDwJQV1YHXQJRBlEDAAEHBgAHUgMAV0NGFwoLXUcQERYTBycXViZAAiASUANdFgAJU1kGXBUXQAYgElVxB0BSIRMGU1oOFxFGQQQmFgAnQFJyEgdbXAddAFNRAVcBUAAABAdXB1FdXAMGVVQHVVBRUAINAFZRAgZTXAdQUQBDCwpYVwYPUlMAUAEBVlAFBAEAA1BUUEcOFghUTwMHAQMEUA8NUQFZVlIAVVQEUQIGUAMEB1RWVQFWBVIBUgYPBAYBAwVFUwhZVAVSAVoVXgxYSAcSE1tcXVwMXQ9EW1xYQwcLcgpABAIKTUJVFA4GVVBDVFsQDy0NC0AcEQFRChEBH2lXAl4NBgRWDxEHRwpcVA%3D%3D&count=0&max=0
IP
File type ASCII text, with no line terminators
Hash 9cbccab6374e43fbd920fce9fd8ac992
182a6f6cbdbf3f8a8374b55799a989daafd06848
f2b589a168b3dbc79013fc6e9382e84fc42b13f702537c74f3ab1c775fda339b
GET /4shx3e7cIauX-9gG?c0622195562ceb5d=Rrp2iV0FuSKcv5tPVJVVlG_ud-NGopFERjy2tveqRoy634J-m8HNosFaYirxkQjvIK8nFEYBuETxnGfMvrT26St2PlprP3FPKtm3InNLs8Hcnq-eh2WHOuWyHNCxXs-gRjkQmcaTjZTqD6rZt5uNsa-aPCoIHHWC5EIJyrKxXc0CTdtVQU-ODSypQLBVeqzS7EDrk85czezBlZt8ciYgR29osZk&sera_parametere=VUdYUgBVUVoBUFxdAFICBwBWBlMBDwJQV1YHXQJRBlEDAAEHBgAHUgMAV0NGFwoLXUcQERYTBycXViZAAiASUANdFgAJU1kGXBUXQAYgElVxB0BSIRMGU1oOFxFGQQQmFgAnQFJyEgdbXAddAFNRAVcBUAAABAdXB1FdXAMGVVQHVVBRUAINAFZRAgZTXAdQUQBDCwpYVwYPUlMAUAEBVlAFBAEAA1BUUEcOFghUTwMHAQMEUA8NUQFZVlIAVVQEUQIGUAMEB1RWVQFWBVIBUgYPBAYBAwVFUwhZVAVSAVoVXgxYSAcSE1tcXVwMXQ9EW1xYQwcLcgpABAIKTUJVFA4GVVBDVFsQDy0NC0AcEQFRChEBH2lXAl4NBgRWDxEHRwpcVA%3D%3D&count=0&max=0 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/IBmpBiExJbHYZD5A?3bd3347632680a70=TCJVZb5hqAtv6njLg5ctRyeUXc6wCiPLJ9PcExZ9hZJh4BRH7mz2uLiNncyFGWCNW0VjCo6CMxZOYHTMNK0u7DSSPOBUy_uZCoi0taIWiHwqlf9XWM2izoMm9WIX12FCULsoxfbpdCA0ZCXENm0WcUxCSk0&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:35 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7637
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:40:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7637
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:40:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7637
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:40:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7637
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:40:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 17426
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 000cb25b2cb4fa30ce745582dafbab99
a5227f79e64bcab8d8f03822e6d408400a03a23e
7f6a2a99bff95672d34b41489d0dd1132ab8654b745e728e15ed95e987b7ed62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10582
x-amzn-requestid: e18bacd8-6d0e-4957-93ab-97def7442f8c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4okSFKKIAMFlUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0214e-05486d9b283cedc008cba781;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: p1ToWLG__PFWEMRxlPZcouvOTijPoUcMr7ubDCNcy2wMwgusbBjGPA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:13:34 GMT
etag: "a5227f79e64bcab8d8f03822e6d408400a03a23e"
content-type: image/jpeg
age: 16021
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a24cf7b2db6d65c3fe5daf78b3309ced
a3653a9a7baea412808dd91572ff21e1a505c26f
f55ee98bab5ce53d6acc1cac7f54f089b42d5f2ffbe750d869c4f4a7bc26f715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13230
x-amzn-requestid: 8171829a-cf6d-4c33-99a1-f3cef7cd4475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiTH8GoAMFYLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1597a0f06ef3db2534a101aa;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Nvfp0sEYw5bxnFHisq80WCXh6T-LdFlPqs95tyX2epjMfhM_hjUj0A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 17432
etag: "a3653a9a7baea412808dd91572ff21e1a505c26f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13572f84ad268caedcc897f2ad7b9baf
afb91ab43953e8915a2169618d2ab5e330cde0a1
0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F-bdQPU-zYhIlXtxcW_TiqE8ifPg3i0cg8gFuvJSfwoMDTe-Hqy1jg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:02:47 GMT
age: 16668
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/particuliers/ident/image-ordi-loupe_2x.jpg
404 Not Found 593 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/image/particuliers/ident/image-ordi-loupe_2x.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 20e1f4bf221a240b55f4c584062f1d7e
ee93cf81c98121a67145b128b93c2f4ee3110f2b
85c330ac885cf6e04a30239152112f3dbd6cf056e72b1f598773439c3974c587
GET /rsc/contrib/image/particuliers/ident/image-ordi-loupe_2x.jpg HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 593
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/images/content/sprite-form.png
404 Not Found 610 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/images/content/sprite-form.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fa5f19bb36f03734cf230649939fcd2a
078a693a443335f1d375443740828e2abcbcf53b
6fcd9473085013ab148b5269d1d797b82d8199a93a13f5622b3b7c2f44cbf86b
GET /rsc/contrib/identification/src/themes/mabanque/images/content/sprite-form.png HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 610
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24980299-b46f-4879-99f8-3d6a5bcd2153.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24980299-b46f-4879-99f8-3d6a5bcd2153.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2e321721a636309ac45c6722f71a5d5
8f4224824571577109bf32b1fa7646dbfb88e818
a52611068a9694594dec4dddb1bd29afdbba897a2e1f61dcf3ceb81e262912e8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24980299-b46f-4879-99f8-3d6a5bcd2153.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12459
x-amzn-requestid: 5dd251ba-30e6-47aa-846a-9cefa9aa4928
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPHlWIAMFnZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-402585d71ebd0ebf75af210d;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dMwyfVFayhAjpMMOiE96N2N5TwdvJ52UvscJ6miuz4W3qNKXVS9jaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:11:06 GMT
age: 16169
etag: "8f4224824571577109bf32b1fa7646dbfb88e818"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad2298793399bf73c51c7d60952065c1
816bd4c36ceea2c46489ae72fde0b4a94c7c4bef
dc540d64e5e0835c7007e89ca3b5dd620b43a87e13309f323f3843a5f908a199
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8649
x-amzn-requestid: f85f3c9d-95c1-4db6-af5f-595070fe46c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHzboAMFQCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-6eed72bf20887cac6dc1a56a;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7HTSLYJmhfIGlCjeG2EeN3q2Cd9vKlq71nqo3iIuhwkgwlEAlRPmQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:02 GMT
age: 17373
etag: "816bd4c36ceea2c46489ae72fde0b4a94c7c4bef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_type_regular_v2-webfont.woff2
200 OK 19 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_type_regular_v2-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19132, version 2.0\012- data
Hash e5d728db9c4d27876efe1926010a370a
e609553597fd2a276119c7f32b6d4e28b17d8762
9bd666cb14522b64d114d834d585e185a8bdfabdca8b99e53605d640fa75bf66
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/bnpp_type_regular_v2-webfont.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 19132
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_sans_cond_light_v2-webfont.woff2
200 OK 19 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_sans_cond_light_v2-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18612, version 2.0\012- data
Hash 446fe4fe07c0daa942b0c50659107914
3e39feea0aa5b365924e45e492408d673b8430ee
3ace9214510af04a9c296dbf7420c7f6aa4b9974afff8e3f87d6fcef0c751f02
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/bnpp_sans_cond_light_v2-webfont.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 18612
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-Bold.woff2
200 OK 52 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 52016, version 1.0\012- data
Hash c9e6ced6ee6d6f30cc5d3de2a811c27a
c81657cf6561a0b53204237dd231c4eaa0e5d9f2
5fd2e0b935a3fb40a41495182558112674c6508349974e523b7441e0835c0b3a
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/OpenSans-Bold.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 52016
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-Regular.woff2
200 OK 50 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 50180, version 1.0\012- data
Hash a725497524525c361f0d545e4e8ec577
b0135a2d4e69e1a7aeb1d269c9ee43e37fdcc29f
893f7f57805f1a70e7cb63621dcc596e49fc87551d1231c7756b7a958bac931b
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/OpenSans-Regular.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 50180
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-ExtraBold.woff2
200 OK 52 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-ExtraBold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 51776, version 1.0\012- data
Hash f2cc18d929ab128d73bc828bb18a1a0b
7183bb3f45ef99950aa2050d8f0aac4ce6c72bac
196d8f00bc7c598adf046790eec18c52abe426edfe6e9e018e6b8dc876895ee0
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/OpenSans-ExtraBold.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 51776
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-SemiBold.woff2
200 OK 52 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/OpenSans-SemiBold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 52188, version 1.0\012- data
Hash dbee1c4201517c33a8c7269601afc5c7
2ed85013b2fd9b904264bebfa842a25b9f8259b4
0617aa7cdb72567c16c28fee6d42a6cc466df1e02212f98596b5cb429b6a173c
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/OpenSans-SemiBold.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 52188
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash baeed5ecca34118b9471a9f7a9f3fe98
efbc52d00192e76a22c5808299adbbff9ae59018
4b62a4da3f4f33db038870a3d97a39c592a02bfb46c034fae1e96fce0cf6f11f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4402
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:40:36 GMT
Last-Modified: Mon, 06 Feb 2023 01:27:14 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/grid/login.php
404 Not Found 547 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/grid/login.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a692ad0cb94e9e67baef6f942f1704dd
797b62003d118b5222ad20b0b8707c63c7a87ea4
95d7bfb45de69057287724dd976aa5ad1db4d22c7a9aba60f3025c607a757c24
Analyzer Verdict Alert fortinet Phishing
GET /grid/login.php HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Connection: keep-alive
Cookie: PHPSESSID=04c257d9c35fdd55c4b82cee0528cfce
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042040; includeSubDomains
content-length: 547
X-Firefox-Spdy: h2
bddf.d3.sc.omtrdc.net/b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
302 Found 0 B URL HTTP/2 bddf.d3.sc.omtrdc.net/b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: bddf.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
access-control-allow-origin: *
vary: Origin
date: Mon, 06 Feb 2023 02:40:36 GMT
content-type: text/plain;charset=utf-8
expires: Sun, 05 Feb 2023 02:40:36 GMT
last-modified: Tue, 07 Feb 2023 02:40:36 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi_ussquygdx7Ecrzvuvyfbrgexxs=[CS]v4|0-0|63E068A4[CE]; Path=/; Domain=omtrdc.net; Max-Age=34127700; Expires=Thu, 07 Mar 2024 02:35:35 GMT; SameSite=None; Secure
location: https://bddf.d3.sc.omtrdc.net/b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&pccr=true&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
content-length: 0
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_sans-webfont.woff2
200 OK 21 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/bnpp_sans-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21380, version 2.0\012- data
Hash 3399d43d0c5f187a2724bf98b32669c8
4a484f73eca42b556def1b086bb4bf37fa97c788
989083c4d211ad5e8a61cf9ec6af880854ca0e13ab19da92d7b1d8e752096d37
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/bnpp_sans-webfont.woff2 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 21380
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/iconbnp.woff
200 OK 285 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/css/fonts/iconbnp.woff
IP
File type Web Open Font Format, TrueType, length 285008, version 1.0\012- data
Size 285 kB (285008 bytes)
Hash 46bcedb85c157102777d7adc60dcd9a8
19db6017daded89d47c566df4b54448a8c23d61a
d248352dbf6770f55ab1260b4593fa1b4c0f7ad6bc2937e67d6edf254348e409
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/css/fonts/iconbnp.woff HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042041; includeSubDomains
content-length: 285008
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/favicon.ico
200 OK 1.7 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 16x16, 16 colors, 4 bits/pixel\012- data
Hash d9da731ed30480099fd55876cecc697e
72fbeb44d8dab5bd3ecda3c63801208ac30b3696
fe0765d1602e351523c2069febfff8fe11e9b7f00c52999a98829ada67f7df95
GET /favicon.ico HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Cookie: PHPSESSID=04c257d9c35fdd55c4b82cee0528cfce
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042039; includeSubDomains
content-length: 1718
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot
404 Not Found 597 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e25eccf3484af146f0f7d5c4e3cfc6fc
a07491345b80b814ed2f14833499b9f9a0b7468b
fb38e201dacdd94a4f2e3494e809bd202d69a95114a357194688c8a73afb8bfa
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Cookie: PHPSESSID=54090861345c5a75912002e37261c8dc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042039; includeSubDomains
content-length: 597
X-Firefox-Spdy: h2
bddf.d3.sc.omtrdc.net/b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&pccr=true&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
200 OK 43 B URL HTTP/2 bddf.d3.sc.omtrdc.net/b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&pccr=true&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/bddfbnpsitemabanqueprod/1/JS-2.22.4-LCXS/s28438216848132?AQB=1&pccr=true&ndh=1&pf=1&t=6%2F1%2F2023%202%3A41%3A17%201%200&ce=UTF-8&cl=34127700&pageName=%2Flogin.php&g=https%3A%2F%2F3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&cc=EUR&v4=non%20connecte&v9=3710cb97-de0b-4bac-b42e-f61e6b53b272&c29=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&c38=17&c40=17&v87=Launch%20production%20%3A%202023-01-09T12%3A16%3A36Z&v91=3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co%2Flogin.php&v200=Autonomy&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: bddf.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Mon, 06 Feb 2023 02:40:36 GMT
expires: Sun, 05 Feb 2023 02:40:36 GMT
last-modified: Tue, 07 Feb 2023 02:40:36 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3598433630018469888-4619826310565209448
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.woff
200 OK 285 kB URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.woff
IP
File type Web Open Font Format, TrueType, length 285008, version 1.0\012- data
Size 285 kB (285008 bytes)
Hash 46bcedb85c157102777d7adc60dcd9a8
19db6017daded89d47c566df4b54448a8c23d61a
d248352dbf6770f55ab1260b4593fa1b4c0f7ad6bc2937e67d6edf254348e409
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.woff HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Cookie: PHPSESSID=54090861345c5a75912002e37261c8dc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042039; includeSubDomains
content-length: 285008
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot
404 Not Found 597 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e25eccf3484af146f0f7d5c4e3cfc6fc
a07491345b80b814ed2f14833499b9f9a0b7468b
fb38e201dacdd94a4f2e3494e809bd202d69a95114a357194688c8a73afb8bfa
Analyzer Verdict Alert fortinet Phishing
GET /rsc/contrib/identification/src/themes/mabanque/fonts/iconbnp.eot HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/rsc/contrib/identification/src/themes/mabanque/css/style.css
Cookie: PHPSESSID=54090861345c5a75912002e37261c8dc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:37 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042038; includeSubDomains
content-length: 597
X-Firefox-Spdy: h2
content.connexion-mabanque.bnpparibas/t8zmuso929x7x0dj.js?dkklfudiixoo81t6=cco37scf&vlmxh0qvl4qabp2e=4add1b58-e81e-4435-9dfd-ab0d9fe25553&iglr7tf2tj041sh9=101
200 OK 13 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/t8zmuso929x7x0dj.js?dkklfudiixoo81t6=cco37scf&vlmxh0qvl4qabp2e=4add1b58-e81e-4435-9dfd-ab0d9fe25553&iglr7tf2tj041sh9=101
IP
File type ASCII text, with very long lines (15506)
Hash 4258205b9f54144acfd74dbdaa84db51
8269f7c45e90bcf24a6f5879a814a7e5984657d2
9da52cf6441289c9b52d4f3eee7169e73ced12c0e29e5bbbe0d0a3dc64c265a1
GET /t8zmuso929x7x0dj.js?dkklfudiixoo81t6=cco37scf&vlmxh0qvl4qabp2e=4add1b58-e81e-4435-9dfd-ab0d9fe25553&iglr7tf2tj041sh9=101 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/9AEvL998NcVKuvPq?b9d57a6dce85ee6b=loGUP2Rz_9grKYgYnQsPOuEH0DRFrShossOcvMNdA1bIrl02IbGpsiMYIKeSIBt7Jj1Qt0kxh5Csarjfux9ffqIFQs9C99h6Idz1KNNjger9rE1ljc3zsLFLYD28GRcOfOrV370Ce8RIQWYwzK4299gIOiwHwFunfW2aFHI
200 OK 81 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/9AEvL998NcVKuvPq?b9d57a6dce85ee6b=loGUP2Rz_9grKYgYnQsPOuEH0DRFrShossOcvMNdA1bIrl02IbGpsiMYIKeSIBt7Jj1Qt0kxh5Csarjfux9ffqIFQs9C99h6Idz1KNNjger9rE1ljc3zsLFLYD28GRcOfOrV370Ce8RIQWYwzK4299gIOiwHwFunfW2aFHI
IP
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /9AEvL998NcVKuvPq?b9d57a6dce85ee6b=loGUP2Rz_9grKYgYnQsPOuEH0DRFrShossOcvMNdA1bIrl02IbGpsiMYIKeSIBt7Jj1Qt0kxh5Csarjfux9ffqIFQs9C99h6Idz1KNNjger9rE1ljc3zsLFLYD28GRcOfOrV370Ce8RIQWYwzK4299gIOiwHwFunfW2aFHI HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/png
content.connexion-mabanque.bnpparibas/dICFhOieLuusC4by?8b1cce7c7624afb4=_Rpuw5fcF3Fxb12WzQ03mRzIzNl89hhjQHUs8CXb7rzsdXawQdovP-tC_dvhLpXP7MponJRGwGMYJzB59VvNUE2A4MkeVTQr8dX6OcrKhcXPNo9SyTSzOiY--KUdusHfxMicXFEfD822cUPRgrKrhF-M9qMfykPTXzecmFk
200 OK 81 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/dICFhOieLuusC4by?8b1cce7c7624afb4=_Rpuw5fcF3Fxb12WzQ03mRzIzNl89hhjQHUs8CXb7rzsdXawQdovP-tC_dvhLpXP7MponJRGwGMYJzB59VvNUE2A4MkeVTQr8dX6OcrKhcXPNo9SyTSzOiY--KUdusHfxMicXFEfD822cUPRgrKrhF-M9qMfykPTXzecmFk
IP
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /dICFhOieLuusC4by?8b1cce7c7624afb4=_Rpuw5fcF3Fxb12WzQ03mRzIzNl89hhjQHUs8CXb7rzsdXawQdovP-tC_dvhLpXP7MponJRGwGMYJzB59VvNUE2A4MkeVTQr8dX6OcrKhcXPNo9SyTSzOiY--KUdusHfxMicXFEfD822cUPRgrKrhF-M9qMfykPTXzecmFk HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
content.connexion-mabanque.bnpparibas/SjwQJeSiAof-SfYy?e4d369d0b53d5b99=DGSxMpfgCVuvMQ08EI4BFdHEboluThaCGrnPjeglQxGS3DdFLUNeOnmmmo21yWcI0ABLOHSlMI-cNQuqYB4U-qlx38VNIzz135fxWd5y6Fqe_Fsc0LQ9wRcCcw1TOGqpmC2rnQ6pa9rRTLNZlzY6Ga5iIT_Ksg0EkZTRYLtfNyF_NHoILxViQAfSZjrPKyQHmqJ7bHOJ3LEM6G-W&jb=353226266a716f7d354c616e7570266a716f3544696c7570266873627d3f466b7265666d78266a73623f46617a656e6f782d323033303d
200 OK 94 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/SjwQJeSiAof-SfYy?e4d369d0b53d5b99=DGSxMpfgCVuvMQ08EI4BFdHEboluThaCGrnPjeglQxGS3DdFLUNeOnmmmo21yWcI0ABLOHSlMI-cNQuqYB4U-qlx38VNIzz135fxWd5y6Fqe_Fsc0LQ9wRcCcw1TOGqpmC2rnQ6pa9rRTLNZlzY6Ga5iIT_Ksg0EkZTRYLtfNyF_NHoILxViQAfSZjrPKyQHmqJ7bHOJ3LEM6G-W&jb=353226266a716f7d354c616e7570266a716f3544696c7570266873627d3f466b7265666d78266a73623f46617a656e6f782d323033303d
IP
File type ASCII text, with very long lines (8931)
Hash a34be339a1b197d4c0e23c19880abaf0
75bf9d2bd18a0e32df392e8a843bf38d2ddb584b
d6517d26e6a5febd9767c835bd13db8e2a4d2c179a9cc86ff2259ae071783630
GET /SjwQJeSiAof-SfYy?e4d369d0b53d5b99=DGSxMpfgCVuvMQ08EI4BFdHEboluThaCGrnPjeglQxGS3DdFLUNeOnmmmo21yWcI0ABLOHSlMI-cNQuqYB4U-qlx38VNIzz135fxWd5y6Fqe_Fsc0LQ9wRcCcw1TOGqpmC2rnQ6pa9rRTLNZlzY6Ga5iIT_Ksg0EkZTRYLtfNyF_NHoILxViQAfSZjrPKyQHmqJ7bHOJ3LEM6G-W&jb=353226266a716f7d354c616e7570266a716f3544696c7570266873627d3f466b7265666d78266a73623f46617a656e6f782d323033303d HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 7b52812ce34950dc
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=98
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/LUD3PqjtvhQqQsOo?4aa00df407621280=2j1FamTfW4RGOmivQ1FLxHNnroj_ifDVEouazyl7R9-vyaoBnMSczN8LX6pDPit4mGBNurOwPj6IxRrlP2Wt8g3HHVoQpdaiui-kSHlGeANnnAg-Q_XtPA5yLb2JbJ9Stx2JdARnKPnKIUknO8_I7KktcEE&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
200 OK 5.9 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/LUD3PqjtvhQqQsOo?4aa00df407621280=2j1FamTfW4RGOmivQ1FLxHNnroj_ifDVEouazyl7R9-vyaoBnMSczN8LX6pDPit4mGBNurOwPj6IxRrlP2Wt8g3HHVoQpdaiui-kSHlGeANnnAg-Q_XtPA5yLb2JbJ9Stx2JdARnKPnKIUknO8_I7KktcEE&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (332), with CRLF, LF line terminators
Hash ff43919d093a2db342aa55fbdaac1035
42d70ebd5929b504911e7a9d8db7b0143fce0fad
090e8ac9b1143448fbe7db29830072da40cd53a0e469a699588e6c74026f7dd8
GET /LUD3PqjtvhQqQsOo?4aa00df407621280=2j1FamTfW4RGOmivQ1FLxHNnroj_ifDVEouazyl7R9-vyaoBnMSczN8LX6pDPit4mGBNurOwPj6IxRrlP2Wt8g3HHVoQpdaiui-kSHlGeANnnAg-Q_XtPA5yLb2JbJ9Stx2JdARnKPnKIUknO8_I7KktcEE&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-UA-Compatible: IE=Edge
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5927
Keep-Alive: timeout=2, max=97
content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jb=3336266c73633d6a38393d61646b66343b663a3c33666131663066383b60333031643366343132
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jb=3336266c73633d6a38393d61646b66343b663a3c33666131663066383b60333031643366343132
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jb=3336266c73633d6a38393d61646b66343b663a3c33666131663066383b60333031643366343132 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/javascript
content.connexion-mabanque.bnpparibas/2hJdVTUThTDetAAs?ac95cf1226790afb=JlLuQGfYhFGeOk30DxkEUq6yEiiVDGvXLebrLK2mkySeuqPMLd79ewk23jnGOJiE1Mx2XtWDb-S_iVTWwMPM0M2NiqytD1XBLx2wWB6cJfHIpRslizaQaY7PP7iQyfxPh7ffn3bXCntHcshMeOwtmws7CBFg0MxFWBuq4mLq53G7irE2eRYOg9h8ZE5YAZ-6Wrg6UWYovrQi5Oqrwjk
200 OK 14 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/2hJdVTUThTDetAAs?ac95cf1226790afb=JlLuQGfYhFGeOk30DxkEUq6yEiiVDGvXLebrLK2mkySeuqPMLd79ewk23jnGOJiE1Mx2XtWDb-S_iVTWwMPM0M2NiqytD1XBLx2wWB6cJfHIpRslizaQaY7PP7iQyfxPh7ffn3bXCntHcshMeOwtmws7CBFg0MxFWBuq4mLq53G7irE2eRYOg9h8ZE5YAZ-6Wrg6UWYovrQi5Oqrwjk
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash f3b35d866ce69b379cececcad84b5aab
2916247da9604b329a6ee43954e1dea280f88ac1
1819f10edd15d52fe4860c9ad941d76854f31657303f74efa375368306ba7d97
GET /2hJdVTUThTDetAAs?ac95cf1226790afb=JlLuQGfYhFGeOk30DxkEUq6yEiiVDGvXLebrLK2mkySeuqPMLd79ewk23jnGOJiE1Mx2XtWDb-S_iVTWwMPM0M2NiqytD1XBLx2wWB6cJfHIpRslizaQaY7PP7iQyfxPh7ffn3bXCntHcshMeOwtmws7CBFg0MxFWBuq4mLq53G7irE2eRYOg9h8ZE5YAZ-6Wrg6UWYovrQi5Oqrwjk HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jd=353526266a646e353f2662666835386433623c3f613a653e30346535396066356537326361316637623a383b6d652e6a667c6e3d323a3e3d3a35
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jd=353526266a646e353f2662666835386433623c3f613a653e30346535396066356537326361316637623a383b6d652e6a667c6e3d323a3e3d3a35
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jd=353526266a646e353f2662666835386433623c3f613a653e30346535396066356537326361316637623a383b6d652e6a667c6e3d323a3e3d3a35 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: text/javascript
content.connexion-mabanque.bnpparibas/HzHGNGu1qMJ5QpGb?b579470fdc2f0861=JKN7JIVfc3nFKQ3VcEo6tmLbosgp8CFmyxqeRH9ymAreVd-mOU0af-qIcMVUxBChdCcrXbZqUPceNIXXxvvbgR24Zg73SlsYC-kHu8BikAX4JFRrZCxnq081M3oSp7kflO-jlvMdJih74GWxTEr9uLbXSW6MfCwoFfCuTHS46RxJEk5T1xhpsmDGeKa8WtD2W6B5Op-ky6y1XJQZYtDK
200 OK 14 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/HzHGNGu1qMJ5QpGb?b579470fdc2f0861=JKN7JIVfc3nFKQ3VcEo6tmLbosgp8CFmyxqeRH9ymAreVd-mOU0af-qIcMVUxBChdCcrXbZqUPceNIXXxvvbgR24Zg73SlsYC-kHu8BikAX4JFRrZCxnq081M3oSp7kflO-jlvMdJih74GWxTEr9uLbXSW6MfCwoFfCuTHS46RxJEk5T1xhpsmDGeKa8WtD2W6B5Op-ky6y1XJQZYtDK
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash 128e8f1127a2cef81fffcd5bdd097234
be9e53f05f0dbb3d5092a83c0e3d3f0467b8d087
887d47c7e5389d0c01374ba41e891db27f4fa7fec3fa9c730f84b0ec3f8dca87
GET /HzHGNGu1qMJ5QpGb?b579470fdc2f0861=JKN7JIVfc3nFKQ3VcEo6tmLbosgp8CFmyxqeRH9ymAreVd-mOU0af-qIcMVUxBChdCcrXbZqUPceNIXXxvvbgR24Zg73SlsYC-kHu8BikAX4JFRrZCxnq081M3oSp7kflO-jlvMdJih74GWxTEr9uLbXSW6MfCwoFfCuTHS46RxJEk5T1xhpsmDGeKa8WtD2W6B5Op-ky6y1XJQZYtDK HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=98
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/fp/clear.png
200 OK 81 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/fp/clear.png
IP
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*, cco37scf/7b52812ce34950dc4add1b58-e81e-4435-9dfd-ab0d9fe25553
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 06 Feb 2023 02:40:37 GMT
Expires: Sat, 05 Feb 2028 02:40:37 GMT
Etag: 7410dcefe13741a69c51637a02977fbe
Cache-Control: private, must-revalidate, max-age=0
Access-Control-Allow-Origin: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&ja=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&jb=313133266c733d45677a616c6c6925324435263825303020576b6e646775732732304e5625323031302c302d3b422d32305f696e34342d3b42273238783434253b4025303072762733413130352c30212d323847656b6b6f27324e3a30333038313231253a32466b7265666d782532463132352638
204 204 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&ja=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&jb=313133266c733d45677a616c6c6925324435263825303020576b6e646775732732304e5625323031302c302d3b422d32305f696e34342d3b42273238783434253b4025303072762733413130352c30212d323847656b6b6f27324e3a30333038313231253a32466b7265666d782532463132352638
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&ja=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&jb=313133266c733d45677a616c6c6925324435263825303020576b6e646775732732304e5625323031302c302d3b422d32305f696e34342d3b42273238783434253b4025303072762733413130352c30212d323847656b6b6f27324e3a30333038313231253a32466b7265666d782532463132352638 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 204
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
content.connexion-mabanque.bnpparibas/KhxOorHAGUl9BOFi?345cd670a9acdc7e=xCYGxtg9dciwTMaOXKJGHi2XtoKliqDF2ufKAVAvrs3miXKMyC1Lb-kfLPJQdN7pZrZD8oB-FxjtSQRVljMNbZUFf_PcX3_MlU0XEBHVIyhzPiKyuWYPPZraEb7Xr28r0qeTVrtqXH-fyeC1SFPhs-0FFeBmsZ-DBQ4CIziXoOoO
200 OK 30 kB URL HTTP/1.1 content.connexion-mabanque.bnpparibas/KhxOorHAGUl9BOFi?345cd670a9acdc7e=xCYGxtg9dciwTMaOXKJGHi2XtoKliqDF2ufKAVAvrs3miXKMyC1Lb-kfLPJQdN7pZrZD8oB-FxjtSQRVljMNbZUFf_PcX3_MlU0XEBHVIyhzPiKyuWYPPZraEb7Xr28r0qeTVrtqXH-fyeC1SFPhs-0FFeBmsZ-DBQ4CIziXoOoO
IP
File type ASCII text, with very long lines (15125)
Hash 593ddbd30957754627402a53bd49c7a0
1510acbc0db8f735a7f3fe919ace03544357ceb6
3ddd732add2d91481306cde31e2c3651d3c447b4ea647ace6cc064588d210157
GET /KhxOorHAGUl9BOFi?345cd670a9acdc7e=xCYGxtg9dciwTMaOXKJGHi2XtoKliqDF2ufKAVAvrs3miXKMyC1Lb-kfLPJQdN7pZrZD8oB-FxjtSQRVljMNbZUFf_PcX3_MlU0XEBHVIyhzPiKyuWYPPZraEb7Xr28r0qeTVrtqXH-fyeC1SFPhs-0FFeBmsZ-DBQ4CIziXoOoO HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/LUD3PqjtvhQqQsOo?4aa00df407621280=2j1FamTfW4RGOmivQ1FLxHNnroj_ifDVEouazyl7R9-vyaoBnMSczN8LX6pDPit4mGBNurOwPj6IxRrlP2Wt8g3HHVoQpdaiui-kSHlGeANnnAg-Q_XtPA5yLb2JbJ9Stx2JdARnKPnKIUknO8_I7KktcEE&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 7b52812ce34950dc
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=95
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/OqESmE3WM_CGEV9B?63dde8ce330890c1=D8bayarxSDuoRZ76zcwzRDImJYPnKUeKoyVypU9D5D_RrYNuZ9hNgoTGOjOkbXVnkBBOARnb67pXQa2fpuScsAAo6fGDSF02sibCAHhrHC_PHDJiPCnx8Qig5VyUnk4jPrV6eQUvt58M-9JdhiepkQyZwEM&jf=3336266c73603d306d616b66386e336634383a3c62363730353634386c61656437663463376336
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/OqESmE3WM_CGEV9B?63dde8ce330890c1=D8bayarxSDuoRZ76zcwzRDImJYPnKUeKoyVypU9D5D_RrYNuZ9hNgoTGOjOkbXVnkBBOARnb67pXQa2fpuScsAAo6fGDSF02sibCAHhrHC_PHDJiPCnx8Qig5VyUnk4jPrV6eQUvt58M-9JdhiepkQyZwEM&jf=3336266c73603d306d616b66386e336634383a3c62363730353634386c61656437663463376336
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /OqESmE3WM_CGEV9B?63dde8ce330890c1=D8bayarxSDuoRZ76zcwzRDImJYPnKUeKoyVypU9D5D_RrYNuZ9hNgoTGOjOkbXVnkBBOARnb67pXQa2fpuScsAAo6fGDSF02sibCAHhrHC_PHDJiPCnx8Qig5VyUnk4jPrV6eQUvt58M-9JdhiepkQyZwEM&jf=3336266c73603d306d616b66386e336634383a3c62363730353634386c61656437663463376336 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/2hJdVTUThTDetAAs?ac95cf1226790afb=JlLuQGfYhFGeOk30DxkEUq6yEiiVDGvXLebrLK2mkySeuqPMLd79ewk23jnGOJiE1Mx2XtWDb-S_iVTWwMPM0M2NiqytD1XBLx2wWB6cJfHIpRslizaQaY7PP7iQyfxPh7ffn3bXCntHcshMeOwtmws7CBFg0MxFWBuq4mLq53G7irE2eRYOg9h8ZE5YAZ-6Wrg6UWYovrQi5Oqrwjk
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/javascript
ocsp.securetrust.com/
200 OK 638 B IP
ASN #20940 Akamai International B.V.
Hash 03ddcb29c392f4c337923edfe0511ac7
31e0295cfd09cfc0e2bbe56162a834ced6b8d21a
baca249a3152bb0f8f9f07174bb94ab17f7100ddaf7aec6a6d1c581b171b6a70
POST / HTTP/1.1
Host: ocsp.securetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 638
Date: Mon, 06 Feb 2023 02:40:37 GMT
Connection: keep-alive
cco37scf6wsroufpnsa2owtefr72qbb3hhgfg4l67b52812ce34950dcam1.e.aa.online-metrix.net/mQQofM8WXfLNq-PI?894ac173a32138cd=ieYSCJYOcCdzGUASkuJ7c6BYSJ06PRqhD1ihuIkO6CdAYKtJKECpG_s94A_sW2zfi-b03dbFXCEgmy8Iktg7eBUx7QA_LoFh70MocpFRjGbgl8ic_Yv9gS9unM36jCvnSUnLhf95hZIKAnqSEA4-_Bt5QMmuShaiz8A3
200 OK 81 B URL HTTP/1.1 cco37scf6wsroufpnsa2owtefr72qbb3hhgfg4l67b52812ce34950dcam1.e.aa.online-metrix.net/mQQofM8WXfLNq-PI?894ac173a32138cd=ieYSCJYOcCdzGUASkuJ7c6BYSJ06PRqhD1ihuIkO6CdAYKtJKECpG_s94A_sW2zfi-b03dbFXCEgmy8Iktg7eBUx7QA_LoFh70MocpFRjGbgl8ic_Yv9gS9unM36jCvnSUnLhf95hZIKAnqSEA4-_Bt5QMmuShaiz8A3
IP
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /mQQofM8WXfLNq-PI?894ac173a32138cd=ieYSCJYOcCdzGUASkuJ7c6BYSJ06PRqhD1ihuIkO6CdAYKtJKECpG_s94A_sW2zfi-b03dbFXCEgmy8Iktg7eBUx7QA_LoFh70MocpFRjGbgl8ic_Yv9gS9unM36jCvnSUnLhf95hZIKAnqSEA4-_Bt5QMmuShaiz8A3 HTTP/1.1
Host: cco37scf6wsroufpnsa2owtefr72qbb3hhgfg4l67b52812ce34950dcam1.e.aa.online-metrix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81
Content-Type: image/png
content.connexion-mabanque.bnpparibas/wDCmalEplVJc9fqj?126c108246c0cb29=Mr9c0tTVGUxhuHTxhYdI_V1Tb8_PmCjwD1uh6ySPxsljl0afRXdNekJqGnOrL8hRX01n5wjbDZ-sJ-N2owOLimcBRvQhjkF6j5Iry3VwIFB78lkuR1UB9uSWtJdfe4Ufj_EcZnjj7KU7d5Vem36QsSPP0mm7Z2k25lMyOo57gbBQ9xaLlNCi1QKQPSCkq4OjkByeTz6Zu4ajtA1SbNk&jf=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
204 204 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/wDCmalEplVJc9fqj?126c108246c0cb29=Mr9c0tTVGUxhuHTxhYdI_V1Tb8_PmCjwD1uh6ySPxsljl0afRXdNekJqGnOrL8hRX01n5wjbDZ-sJ-N2owOLimcBRvQhjkF6j5Iry3VwIFB78lkuR1UB9uSWtJdfe4Ufj_EcZnjj7KU7d5Vem36QsSPP0mm7Z2k25lMyOo57gbBQ9xaLlNCi1QKQPSCkq4OjkByeTz6Zu4ajtA1SbNk&jf=34313426736b64577a6e6c3d746c725f4041637d7865335d693a39525f616e75267369665f646174653f313e3f353e35313a38302473616c5f767978653f77656a386561647361247369645f6b6779353b303d39333831333236383f3263383e343a63653b6630303031303430383261383434306b653b64303b30313237383b34303038303636346b60363366313934353263333063383030396e30373f613563383f393037376c323137363b3b32673931643a363632623437393a6c326c63633a396537376b69643a3430363732373e3b323b3564656363366234363a343a69623139666a326132343e3d3064343f646735353a3031303863373666383234383730396c642e73696c5f736b67353b30363438323030313a64643a39346467306364633867303069326a33373031376339693e6636336c323232623a34653a3031353a336234653567313b3d643d34386c36623a393b383230303f336139373866343534396432313363626366386e38366c34653d6362333639386167313866643132306732643332666065656330363764386a663e63653b352671696e7a3d32
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wDCmalEplVJc9fqj?126c108246c0cb29=Mr9c0tTVGUxhuHTxhYdI_V1Tb8_PmCjwD1uh6ySPxsljl0afRXdNekJqGnOrL8hRX01n5wjbDZ-sJ-N2owOLimcBRvQhjkF6j5Iry3VwIFB78lkuR1UB9uSWtJdfe4Ufj_EcZnjj7KU7d5Vem36QsSPP0mm7Z2k25lMyOo57gbBQ9xaLlNCi1QKQPSCkq4OjkByeTz6Zu4ajtA1SbNk&jf=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 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 204
Date: Mon, 06 Feb 2023 02:40:38 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/png;charset=UTF-8
Keep-Alive: timeout=2, max=94
content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=3132312626726d35666f2e61756c683d66663d3c62373438383235356b6635676236303b636365646363353e3f323e65633d313034633e303534323063673964383b373b36363333343032333166643a2e6570333d6c66363a656e3f62323730386366346a35396462386660656265653364356969636b643331363432
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=3132312626726d35666f2e61756c683d66663d3c62373438383235356b6635676236303b636365646363353e3f323e65633d313034633e303534323063673964383b373b36363333343032333166643a2e6570333d6c66363a656e3f62323730386366346a35396462386660656265653364356969636b643331363432
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=3132312626726d35666f2e61756c683d66663d3c62373438383235356b6635676236303b636365646363353e3f323e65633d313034633e303534323063673964383b373b36363333343032333166643a2e6570333d6c66363a656e3f62323730386366346a35396462386660656265653364356969636b643331363432 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:38 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=93
Connection: Keep-Alive
Content-Type: text/javascript
content.connexion-mabanque.bnpparibas/1Cs1RGjYwP0XM7Iq?5cd9034da556d284=gpqRFwPAM3tLdZKyI02VqJtPV2Vp_5nHPK29YLpCQOSroLHE4ihURYqXVhZRJTYrPXZVMwsLNaG7uGydd3jcjc2yUxPrjFhhwLCwhMmrSly20OKclbQ6jxjY8d5CQhOoVajm2cDqSoaWq0uns53C9XoNsBFJY7SCG69ABdKqurRdSW8egBQ-UnhvW5UwgPgRuJehUX0QkNA1_DWUGZg&jac=1&je=34362626706b636735393966383f34303a363b303337633e343563346932353536623533313734303837643e6c393c3031
204 204 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/1Cs1RGjYwP0XM7Iq?5cd9034da556d284=gpqRFwPAM3tLdZKyI02VqJtPV2Vp_5nHPK29YLpCQOSroLHE4ihURYqXVhZRJTYrPXZVMwsLNaG7uGydd3jcjc2yUxPrjFhhwLCwhMmrSly20OKclbQ6jxjY8d5CQhOoVajm2cDqSoaWq0uns53C9XoNsBFJY7SCG69ABdKqurRdSW8egBQ-UnhvW5UwgPgRuJehUX0QkNA1_DWUGZg&jac=1&je=34362626706b636735393966383f34303a363b303337633e343563346932353536623533313734303837643e6c393c3031
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1Cs1RGjYwP0XM7Iq?5cd9034da556d284=gpqRFwPAM3tLdZKyI02VqJtPV2Vp_5nHPK29YLpCQOSroLHE4ihURYqXVhZRJTYrPXZVMwsLNaG7uGydd3jcjc2yUxPrjFhhwLCwhMmrSly20OKclbQ6jxjY8d5CQhOoVajm2cDqSoaWq0uns53C9XoNsBFJY7SCG69ABdKqurRdSW8egBQ-UnhvW5UwgPgRuJehUX0QkNA1_DWUGZg&jac=1&je=34362626706b636735393966383f34303a363b303337633e343563346932353536623533313734303837643e6c393c3031 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 204
Date: Mon, 06 Feb 2023 02:40:38 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
content.connexion-mabanque.bnpparibas/YN5omiiD-AvfXL9m?a33184408e243dd4=DUEuDrrB9cPd-WQu3N6pk1JTyKVfyphhZxKvqr97YD4MmTXB4c-iGfNI78zwYSDpvihXdzhZonz36c8mNkbzvEO_oJdgnFjVlweFbNwlr8oPTTQI_v9t1p3dKtezpmr60Vc53KBsYSmlFFql6P2YSOXz2m-1cPffdxFj6lzP8EZ41Qr5E4ntxu2MU11WoQYDMRIrX2fx4X0D_DIqu5LREPhYSfM&sera_parametere=URIIV10CA1ZTUA0LBwcGUQVVDAFaVFFaAQIMCwVSUVYHBwIHWlcLUVIBVR9GQ1kKWRJARksUASdABHYcAnRBUQcIRldUVF8GC0dHHAZ0QVR1UhAFfBQAUw1cR01GFVcnElV3Fw91FAcMDlcBAAcCAFNUAFddAwFXUAMNAANSBlUDAAAGDQULAAEDUlpTCFRRVVUTXFdfUQZYBFYMBwhVUVQHBgYBBAIHBhVeSggAHAFWVlALDFQABwQLAAhTBwUHVAECAV4FAVAEUFJfBQZUUFVaAVcOAQtFBFoJCAUGUlsRC1wPFQAUEwwODQAMCVxFXwkIFFoMdAoXVlJWTRYGFQpTBQceU10QWH9dV0BIQgBVX0FWQm5RAglfVlhWW0IGQ18MAw%3D%3D&count=0&max=0
200 OK 61 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/YN5omiiD-AvfXL9m?a33184408e243dd4=DUEuDrrB9cPd-WQu3N6pk1JTyKVfyphhZxKvqr97YD4MmTXB4c-iGfNI78zwYSDpvihXdzhZonz36c8mNkbzvEO_oJdgnFjVlweFbNwlr8oPTTQI_v9t1p3dKtezpmr60Vc53KBsYSmlFFql6P2YSOXz2m-1cPffdxFj6lzP8EZ41Qr5E4ntxu2MU11WoQYDMRIrX2fx4X0D_DIqu5LREPhYSfM&sera_parametere=URIIV10CA1ZTUA0LBwcGUQVVDAFaVFFaAQIMCwVSUVYHBwIHWlcLUVIBVR9GQ1kKWRJARksUASdABHYcAnRBUQcIRldUVF8GC0dHHAZ0QVR1UhAFfBQAUw1cR01GFVcnElV3Fw91FAcMDlcBAAcCAFNUAFddAwFXUAMNAANSBlUDAAAGDQULAAEDUlpTCFRRVVUTXFdfUQZYBFYMBwhVUVQHBgYBBAIHBhVeSggAHAFWVlALDFQABwQLAAhTBwUHVAECAV4FAVAEUFJfBQZUUFVaAVcOAQtFBFoJCAUGUlsRC1wPFQAUEwwODQAMCVxFXwkIFFoMdAoXVlJWTRYGFQpTBQceU10QWH9dV0BIQgBVX0FWQm5RAglfVlhWW0IGQ18MAw%3D%3D&count=0&max=0
IP
File type ASCII text, with no line terminators
Hash 34c7e32d4e48e87689d8e2e4feed36c6
88995e0bd977a366920385b2adc5b942fe438ea7
de14c37ec69e12b3f5b3301b7b4f977a783f4defdf2d8cce6d2bf555cc62e881
GET /YN5omiiD-AvfXL9m?a33184408e243dd4=DUEuDrrB9cPd-WQu3N6pk1JTyKVfyphhZxKvqr97YD4MmTXB4c-iGfNI78zwYSDpvihXdzhZonz36c8mNkbzvEO_oJdgnFjVlweFbNwlr8oPTTQI_v9t1p3dKtezpmr60Vc53KBsYSmlFFql6P2YSOXz2m-1cPffdxFj6lzP8EZ41Qr5E4ntxu2MU11WoQYDMRIrX2fx4X0D_DIqu5LREPhYSfM&sera_parametere=URIIV10CA1ZTUA0LBwcGUQVVDAFaVFFaAQIMCwVSUVYHBwIHWlcLUVIBVR9GQ1kKWRJARksUASdABHYcAnRBUQcIRldUVF8GC0dHHAZ0QVR1UhAFfBQAUw1cR01GFVcnElV3Fw91FAcMDlcBAAcCAFNUAFddAwFXUAMNAANSBlUDAAAGDQULAAEDUlpTCFRRVVUTXFdfUQZYBFYMBwhVUVQHBgYBBAIHBhVeSggAHAFWVlALDFQABwQLAAhTBwUHVAECAV4FAVAEUFJfBQZUUFVaAVcOAQtFBFoJCAUGUlsRC1wPFQAUEwwODQAMCVxFXwkIFFoMdAoXVlJWTRYGFQpTBQceU10QWH9dV0BIQgBVX0FWQm5RAglfVlhWW0IGQ18MAw%3D%3D&count=0&max=0 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/LUD3PqjtvhQqQsOo?4aa00df407621280=2j1FamTfW4RGOmivQ1FLxHNnroj_ifDVEouazyl7R9-vyaoBnMSczN8LX6pDPit4mGBNurOwPj6IxRrlP2Wt8g3HHVoQpdaiui-kSHlGeANnnAg-Q_XtPA5yLb2JbJ9Stx2JdARnKPnKIUknO8_I7KktcEE&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:40:38 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=92
Transfer-Encoding: chunked
content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=32352626776b6d357f656a72746b5f696c746d7a6e636c576d666e73
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=32352626776b6d357f656a72746b5f696c746d7a6e636c576d666e73
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GGZwxgn5BzSejuGv?a061c624becefa7f=le9fQEW36JveXH4TauHbe8-27ODocRwweQkmAoBZeHZDIeAKD6BFjU2PZcNzm_XzY1pyJXegTqs6ZcoHZTG8cM9u01YHqdunKKXsPdXq6aLDTMJhqDkkM_PreHGKMaOWxiHFunTPeNGvFVVH-N0RnPRb9po&jac=1&je=32352626776b6d357f656a72746b5f696c746d7a6e636c576d666e73 HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:41 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/javascript
content.connexion-mabanque.bnpparibas/lcjV-rW6EQ4QXFL3?3184347004e3e5f8=-X2fWXqUNmgdn49SAud2lAJCJbtb2id5cNDEcXaNW15-5MYBmTos26qu6QxdOCHk258uUAievfspuDj9fS8e87KfgsL06sLupTFYr1pM_MjKbwN8LdeLKtOWDjEOMKkPPvbqarept0bYEqd0788yTWhJDfs
204 No Content 0 B URL HTTP/1.1 content.connexion-mabanque.bnpparibas/lcjV-rW6EQ4QXFL3?3184347004e3e5f8=-X2fWXqUNmgdn49SAud2lAJCJbtb2id5cNDEcXaNW15-5MYBmTos26qu6QxdOCHk258uUAievfspuDj9fS8e87KfgsL06sLupTFYr1pM_MjKbwN8LdeLKtOWDjEOMKkPPvbqarept0bYEqd0788yTWhJDfs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /lcjV-rW6EQ4QXFL3?3184347004e3e5f8=-X2fWXqUNmgdn49SAud2lAJCJbtb2id5cNDEcXaNW15-5MYBmTos26qu6QxdOCHk258uUAievfspuDj9fS8e87KfgsL06sLupTFYr1pM_MjKbwN8LdeLKtOWDjEOMKkPPvbqarept0bYEqd0788yTWhJDfs HTTP/1.1
Host: content.connexion-mabanque.bnpparibas
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7
Origin: https://content.connexion-mabanque.bnpparibas
Connection: keep-alive
Referer: https://content.connexion-mabanque.bnpparibas/HzHGNGu1qMJ5QpGb?b579470fdc2f0861=JKN7JIVfc3nFKQ3VcEo6tmLbosgp8CFmyxqeRH9ymAreVd-mOU0af-qIcMVUxBChdCcrXbZqUPceNIXXxvvbgR24Zg73SlsYC-kHu8BikAX4JFRrZCxnq081M3oSp7kflO-jlvMdJih74GWxTEr9uLbXSW6MfCwoFfCuTHS46RxJEk5T1xhpsmDGeKa8WtD2W6B5Op-ky6y1XJQZYtDK
Cookie: thx_guid=c7305a29cab59fce46cd50ea1f21fb67
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Mon, 06 Feb 2023 02:40:42 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Access-Control-Allow-Origin: https://content.connexion-mabanque.bnpparibas
Content-Type: text/javascript
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/grid/c24205860470317084637324093612477495043
302 Found 0 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/grid/c24205860470317084637324093612477495043
IP
Analyzer Verdict Alert fortinet Phishing
GET /grid/c24205860470317084637324093612477495043 HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:35 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: login.php
pragma: no-cache
replit-cluster: global
set-cookie: PHPSESSID=04c257d9c35fdd55c4b82cee0528cfce; path=/
strict-transport-security: max-age=4042041; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/keepalive
302 Found 0 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/keepalive
IP
Analyzer Verdict Alert fortinet Phishing
GET /keepalive HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: login.php
pragma: no-cache
replit-cluster: global
set-cookie: PHPSESSID=54090861345c5a75912002e37261c8dc; path=/
strict-transport-security: max-age=4042040; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
200 OK 0 B URL HTTP/2 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
IP
Analyzer Verdict Alert fortinet Phishing
GET /login.php HTTP/1.1
Host: 3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Referer: https://3710cb97-de0b-4bac-b42e-f61e6b53b272.id.repl.co/login.php
Connection: keep-alive
Cookie: PHPSESSID=54090861345c5a75912002e37261c8dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 02:40:36 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=4042039; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
34.149.204.188
23.36.79.25
93.184.220.29
13.37.25.97