firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 23:10:03 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fQFC_Ekzlej9WSij5qaqPhDpiD6FJSUeVBIVxUAJbXyveXlbJSYMug==
Age: 2442
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6716f88f982aa553eaf5de31b2629224
97ab757b0a059027ffb04675114e5c55738fccaf
06af9ae9fc72a3aeb4be2b742128a0cb8ea4aff348afe2e4490d3639b3b377d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06AF9AE9FC72A3AEB4BE2B742128A0CB8EA4AFF348AFE2E4490D3639B3B377D9"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19567
Expires: Thu, 15 Sep 2022 05:16:52 GMT
Date: Wed, 14 Sep 2022 23:50:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4wmfRwadd-J9PPCLZXqoHgUwD5dy3XVHE2V5ED9x8_mXPk4KXj2iaQ==
age: 69330
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
308 Permanent Redirect 110 B URL HTTP/1.1 gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
IP
File type HTML document, ASCII text
Hash 87bd770114d093d7490de82bc8ffaa71
de030e7f824ab34c82683969cf3c672b268eebc7
9143f8926dfe9dec751cbe3c44b6f77d6404bb066a285e665e93788dd81c33a9
Analyzer Verdict Alert openphish Banco Galicia
fortinet Phishing
GET /online/login24b8.html HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 308 Permanent Redirect
Content-Type: text/html; charset=utf-8
Location: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Replit-Cluster: global
Date: Wed, 14 Sep 2022 23:50:45 GMT
Content-Length: 110
Via: 1.1 google
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 23:50:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 80e83f37b507ec74e485d579a4576aa4
b403694903537f46d4dd442e6efab6607695a548
a6da84b85e47fb60af9ce6b66ff9950604d0c0f26e1c3b187ec5619623fd2a04
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6DA84B85E47FB60AF9CE6B66FF9950604D0C0F26E1C3B187EC5619623FD2A04"
Last-Modified: Wed, 14 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14483
Expires: Thu, 15 Sep 2022 03:52:08 GMT
Date: Wed, 14 Sep 2022 23:50:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 14 Sep 2022 23:03:22 GMT
Expires: Wed, 14 Sep 2022 23:44:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Pr6jmC5kHwI00B5Cku-LKaaeiz4wYEf6BidHFC1iiAvZcRtcS8O_Dw==
Age: 2843
gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
200 OK 66 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18845)
Hash 30dc2a6683e561b792cda7419d1c7582
740702c8a74276dd99db50d3ef8cdbb486c334f1
bc62558d3d6a8ccd3b118c9e8a7dc8fcda5dc3b4ea361d14deea71377c4f3d1f
Analyzer Verdict Alert openphish Banco Galicia
fortinet Phishing
GET /online/login24b8.html HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 65833
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5217
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 23:50:45 GMT
Last-Modified: Wed, 14 Sep 2022 22:23:48 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/Keyboard/keyboard9862.css?v=637945410729640000
200 OK 492 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/Keyboard/keyboard9862.css?v=637945410729640000
IP
Hash cde47bbdcc48b7a1883bfa6ff9461e1b
df0ffcc2e83ba3da25ffdb9e4dfe70165e1f34a8
612a237e8ee113c28afb5b58bce39eed244dc31b6d2127b45da334edca204b85
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/Keyboard/keyboard9862.css?v=637945410729640000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 492
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/Keyboard/simple-keyboarddb0a.css?v=637945410729650000
200 OK 2.8 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/Keyboard/simple-keyboarddb0a.css?v=637945410729650000
IP
Hash 7ac8b1ce1d4560506b4ddaace5546637
ec9cf772f643b3583aa07012f94715a4c55c22ed
c46e9d5b86e7a9c0405f4edb56d1f7f8a4a463dca80ff9b99b916da39064a233
GET /online/Content/Keyboard/simple-keyboarddb0a.css?v=637945410729650000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 2790
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/seguloginclientless21b1?v=9ZoP9ZFYiPx6cKccgyoSkhtYxZ89MVu0hcQrXZ7YUtM1
200 OK 436 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/seguloginclientless21b1?v=9ZoP9ZFYiPx6cKccgyoSkhtYxZ89MVu0hcQrXZ7YUtM1
IP
File type ASCII text, with very long lines (436), with no line terminators
Hash b5b11848c082822cdadac05e9f169809
d4373a43ca4cc74d1e3a9a1da6fc1c61853c38c1
b8f28cd9cc6257cdefca49414abb41ad8eabfaf681b33663da840e88d72ebfbd
GET /online/bundles/seguloginclientless21b1?v=9ZoP9ZFYiPx6cKccgyoSkhtYxZ89MVu0hcQrXZ7YUtM1 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 436
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/seguloginborders85dc?v=GEgi_2YCCdJcWit_704ESvjq-n4qBXwbOONJ0vLJ0j01
200 OK 651 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/seguloginborders85dc?v=GEgi_2YCCdJcWit_704ESvjq-n4qBXwbOONJ0vLJ0j01
IP
File type ASCII text, with very long lines (651), with no line terminators
Hash 972ec8df496b03ff74dca5a0f72e21c5
bc7837d85c544fd47a87ab6a4b2929e35a36f4be
c714daca086c41b0915c1eb7cdfc38696582eba1d6a0259e2fec643e84728be6
GET /online/bundles/seguloginborders85dc?v=GEgi_2YCCdJcWit_704ESvjq-n4qBXwbOONJ0vLJ0j01 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 651
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/logo.svg
200 OK 5.2 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8a2cc43860537affd5c0a21c0f111f32
ccf94df7487d8132a3c5ce7657810d52ce7fbd8c
b4ff0e55e735bcecbe65b3d851306ed458d3ef865d108b74dbc107ead609a17a
Analyzer Verdict Alert fortinet Phishing
GET /online/logo.svg HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 5199
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/customcarousel.minf971.css?v=637945410727810000
200 OK 1.9 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/customcarousel.minf971.css?v=637945410727810000
IP
File type ASCII text, with very long lines (1920)
Hash 507cddc424365cfc443858856b1747fa
74f55054e13021d5b5c6331778e42dc42c80d6d4
f397778bb003ff2d647f5d7d90050f9b50f43622fb02637c8537f159f460bbad
GET /online/Content/customcarousel.minf971.css?v=637945410727810000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 1949
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/FrontFunctions.min15cc.js?v=637945410726950000
200 OK 28 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/FrontFunctions.min15cc.js?v=637945410726950000
IP
File type Unicode text, UTF-8 text, with very long lines (28360), with no line terminators
Hash 5bc5d136b360c62c02758fe9d962c6d9
df943c76f1da2e164f98d6d538d32ef5b767d9a0
3f961962dc4471c881dd809308411177f1201cc7cb7691b24c9bd66bcfde5722
Analyzer Verdict Alert fortinet Phishing
GET /online/Scripts/FrontFunctions.min15cc.js?v=637945410726950000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 28367
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/polyfill.js
200 OK 1.7 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/polyfill.js
IP
Hash af084dc0816f1bafc0e08b0eba1e6f0c
b0bf7cd46e0ef578d6a1a0414e0f139b5150f023
fcfddb3e6fe7aea078fdb1ca5a04a69d5bc5f592d5918266079b35f15eda3ddf
Analyzer Verdict Alert fortinet Phishing
GET /online/Scripts/Keyboard/polyfill.js HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 1730
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/keyboard.js
200 OK 6.0 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/keyboard.js
IP
Hash 61a390c5be9c10894a2e048cd4921f89
b2e7cf642f37bfedc110e7710a802cec65666f80
1c58f92f9596b6dd2a8c87f36410923e9c496f4dd5ecd597e637f4bdc0802aae
Analyzer Verdict Alert fortinet Phishing
GET /online/Scripts/Keyboard/keyboard.js HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 6027
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/simple-keyboard.min.js
200 OK 20 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Scripts/Keyboard/simple-keyboard.min.js
IP
File type ASCII text, with very long lines (19664)
Hash 2fff5b9cd34cce9b9c854a0235bade78
69d930b472f4866648e3d387bdd58311920eea19
d4c188569ffbc2be5b08bb39ac400654b41bce116782a6a598ae932ed4340a6d
Analyzer Verdict Alert fortinet Phishing
GET /online/Scripts/Keyboard/simple-keyboard.min.js HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 20207
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/bootstrap.min1750.css?v=637945410727690000
200 OK 124 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/bootstrap.min1750.css?v=637945410727690000
IP
File type ASCII text, with very long lines (65371)
Size 124 kB (123759 bytes)
Hash ee5a93e25028dd60f2f771e22dcedd36
68035921b542ffa082397f664a316401e6cd3b14
842ecd7fb6b4d5c497f50da917974a93eeb82406868507fb185d3de51add9288
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/bootstrap.min1750.css?v=637945410727690000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 123759
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 77BGaD2HQBh2aHpJidveLA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cd5i3GBAPSqTljDZqZ30h1/HMrA=
gloomyunfinisheddivisor.juanperez109.repl.co/assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js
200 OK 277 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js
IP
File type ASCII text, with very long lines (32771)
Size 277 kB (276746 bytes)
Hash 4748fa5d887666660b9996d329962da6
135659f5adabde9c9d03805a9bca80388d69ef96
bae68ef70c156567ddee0ef567911e2add35f5a1cbac345f08602767447ad5dc
Analyzer Verdict Alert fortinet Phishing
GET /assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 276746
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/sharedout3c32?v=yUVXBWmo0YLvqtcuMIP0Y22eKqXQ2dPOQceK5neEn3Q1
200 OK 387 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/bundles/sharedout3c32?v=yUVXBWmo0YLvqtcuMIP0Y22eKqXQ2dPOQceK5neEn3Q1
IP
File type Unicode text, UTF-8 text, with very long lines (65435), with no line terminators
Size 387 kB (386613 bytes)
Hash 9861fa51e74a108f05a388c4bc7547ec
6227ce8903aafc40485e4adda69f945bcd25ed4e
c4145a9e8ffd7f6e600cb97e9d5b54488499fec84e99b147ee7c48d171314395
Analyzer Verdict Alert fortinet Phishing
GET /online/bundles/sharedout3c32?v=yUVXBWmo0YLvqtcuMIP0Y22eKqXQ2dPOQceK5neEn3Q1 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 386613
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/default.min2cc7.css?v=637945410953580000
200 OK 1.2 MB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/default.min2cc7.css?v=637945410953580000
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.2 MB (1241767 bytes)
Hash 5e5aab1ac6b4a0d9bf72bc0c184cfb16
812fbabf9ce33dd65858ac1aad51eda87c9328ad
1434d011d8437ad6e922c6c12383a4059c91bef18eb20eae48711d890ca96cdd
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/default.min2cc7.css?v=637945410953580000 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 1241767
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/101-African-Woman-Sofia-Freixas.png
200 OK 1.2 MB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/101-African-Woman-Sofia-Freixas.png
IP
File type PNG image data, 4167 x 5455, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1157365 bytes)
Hash 0e9f02566b19b413097e779999efdfd8
13c8b1a0b6ae46326eb5be06afc04507f961333b
68fb68b2c2db579fa00e3f65d5280af2eadc0be016279216fd3cd848548b9495
GET /online/101-African-Woman-Sofia-Freixas.png HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Wed, 14 Sep 2022 23:50:45 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692199; includeSubDomains
content-length: 1157365
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/www.googletagmanager.com/gtm5445.html?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x
404 Not Found 665 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/www.googletagmanager.com/gtm5445.html?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c79be4d907f8bbf877160eb0097da5a
219d715eaa62bc478f727f5ca26f30f1a3193a70
a3eb2edd9d711d8ef99faeadfd70c4327ce73976a6bb72a20fa650d525dc9d7e
GET /www.googletagmanager.com/gtm5445.html?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:46 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692198; includeSubDomains
content-length: 665
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/logo.svg
404 Not Found 556 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/logo.svg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bdfbadd225383b28d235463b3ef41204
9cab9fcbcd036cbebc5ee3b04bd5b8782ed04019
20f34eb3faddc72bab31973a0f53f06b7146a34f2af6ac95fbe909807ab3c6c5
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/logo.svg HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/default.min2cc7.css?v=637945410953580000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:46 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692198; includeSubDomains
content-length: 556
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/fonts/Inter-Regular.woff2
200 OK 89 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/fonts/Inter-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 89212, version 1.0\012- data
Hash bffaed793493dc46bf0789e2275909ac
21178040c070176c06653b76d42b1e19810c2df0
77ca56870309a85759fb7116aef2119a26e358145e808868543ca1fe16c27720
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/fonts/Inter-Regular.woff2 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/default.min2cc7.css?v=637945410953580000
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Wed, 14 Sep 2022 23:50:46 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692198; includeSubDomains
content-length: 89212
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f5b411000b471d112c46c372381106a6
b01d3a48ce9361c513bdf60545dbb8a2a12c04c2
0766242c74f9ea80b45f92a38c57305b2f719e54030ec6d8cfb7b86cb3632238
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 353
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 23:50:46 GMT
Last-Modified: Wed, 14 Sep 2022 23:44:53 GMT
Server: ECS (amb/6BA4)
X-Cache: HIT
Content-Length: 471
gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/fonts/fontawesome-webfont.woff2
200 OK 77 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/fonts/fontawesome-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Phishing
GET /online/Content/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/Content/default.min2cc7.css?v=637945410953580000
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
date: Wed, 14 Sep 2022 23:50:46 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692198; includeSubDomains
content-length: 77160
X-Firefox-Spdy: h2
detectca.easysol.net/detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js
200 OK 1.6 kB URL HTTP/1.1 detectca.easysol.net/detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js
IP
File type ASCII text, with very long lines (1644), with no line terminators
Hash 13e295586a7b0cdd3ed9f462ab05e955
ce2285a5ae57f033defcb01e9fe0613a7f41d468
207a3c20ebe9da7830c971ab74baf155b5b8802e596a5248094840ff03e7cd28
GET /detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js HTTP/1.1
Host: detectca.easysol.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 23:50:46 GMT
Content-Type: application/javascript
Content-Length: 1644
Last-Modified: Tue, 24 Aug 2021 00:00:00 GMT
Connection: keep-alive
ETag: "61243680-66c"
Accept-Ranges: bytes
detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&sr=1280%20x%201024&url=https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html&rf=&nc=0.31304920233210054
200 OK 82 B URL HTTP/1.1 detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&sr=1280%20x%201024&url=https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html&rf=&nc=0.31304920233210054
IP
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash ae11c9259e141875b33cbb6598aa1485
4d71dc1bd4621df68ee846fe3f9409606aabced4
ca2613f315c93819ed7c4a14d44dcf8b041a71c5e032bd0aec9b399a6f4eb491
GET /detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&sr=1280%20x%201024&url=https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html&rf=&nc=0.31304920233210054 HTTP/1.1
Host: detectca.easysol.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 14 Sep 2022 23:50:47 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
ocsp.digicert.com/
200 OK 471 B IP
Hash 8cde7cfad467d0aea5bde984692bcf3a
628c92fb0e013e825c7472b062bd195309929c55
a78b90e26b5a7fe07ae106cc32fdfc8ea058b4ef21da8eb15a694fc676bcaf43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 23:50:47 GMT
Last-Modified: Wed, 14 Sep 2022 22:34:38 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2484
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 23:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2484
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 23:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2484
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 23:50:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3545c74-7af3-4ad8-815b-6a50681a2362.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3545c74-7af3-4ad8-815b-6a50681a2362.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f42b72c3fd66a6758ebcf0ca8cc1a046
13d42d455f5131b7b861b97eb3f0e91236d4d222
4a07fcacde77dc890164fda9f295b61af6947b2d7f3f84f64749d93e3a1e5b99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3545c74-7af3-4ad8-815b-6a50681a2362.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10633
x-amzn-requestid: 2a8ec7f2-8704-440e-9966-ae4643d6aa5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YdyhcF6RIAMFTEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322313c-4d1bfab72580e62231978193;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 19:53:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Dr0K5GobFSc2ooWzPsbe6tfoTbF_NglaVuT8z-cM-B0AufMh_PohhQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:13 GMT
age: 12574
etag: "13d42d455f5131b7b861b97eb3f0e91236d4d222"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a6939786c9343412c9af87efd3f44e0
14131148fda4e8d85b582fd20e76bcc814341bf1
8412c50f0fdc131d9c4422f2d7307fc1ee062c3580a1d754ef71cf84f9727d49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8447
x-amzn-requestid: 6a307dbf-af18-4b40-a2c4-cda4a6e302d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLe84HUzIAMFkUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631adeb8-166dc8b954f4e5b50a0843de;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 06:35:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qQaQeJRgo5OcpjqbzgyZQCl-pYpvj6P_aoB07WGfV0YXyZqv4AQNCg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:42:17 GMT
age: 7710
etag: "14131148fda4e8d85b582fd20e76bcc814341bf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d547c90-3ccc-4c25-a8e5-de1d932a8cfb.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d547c90-3ccc-4c25-a8e5-de1d932a8cfb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aaf675adec05212317877a5f479d11a7
cab4d850cd2bc5b3e1570ae837a58382e6eae5ec
cb4eb5b406f1ec01e3094d0519d8e4e7a469056bb898e2c47d48378e4b2b261d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d547c90-3ccc-4c25-a8e5-de1d932a8cfb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3951
x-amzn-requestid: 65c15365-1bff-4dd2-a651-33683a033e05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE9_oHP_oAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63184397-148253910e5cd21b0e436b09;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:09:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzHSKob2n4WsbIoi6eJdCptVrefJxBEVANMp-WZSm6HsOI7bPUwaDA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:19:28 GMT
age: 5479
etag: "cab4d850cd2bc5b3e1570ae837a58382e6eae5ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6fcd0641757ecb9061e0272fc9377b8a
96afd6daa0d13f8a05ceb77880f967d539f37702
8af5e3c3e524a5e3661e50a36403a5cc6c95521e77984ce954ceefd5a542abfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5392f754-e2f9-4a41-bd41-e281b109c83d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5097
x-amzn-requestid: 7d0072f1-0832-4b01-9f5a-081c7d193420
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YaGbEGDiIAMFqGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320b779-2ee57a3e5641f70c00116156;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 17:01:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5TMIu7RzFcpyWKH_HSAd4LDal3PFMAa37n0SVEVDFGyz5RJeqJq5Rw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:43:12 GMT
age: 7655
etag: "96afd6daa0d13f8a05ceb77880f967d539f37702"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0becc25a-4375-42b3-9121-290b0edc8240.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0becc25a-4375-42b3-9121-290b0edc8240.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4ef4e58a54fc502b6b9609e1ba1656e
67c7a034b8adc33d5b90bf9612aae4a16a127e3e
22dc59ae01364815c13b1f936cc8b6b60425319aee0ce561d4ee9d156dc86af7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0becc25a-4375-42b3-9121-290b0edc8240.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8574
x-amzn-requestid: e7466c90-8083-4503-997c-2e866e22c4fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeB2LE6ToAMFTsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632249c0-0be07d541676dd92489462f4;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eNXzmmLPUlU-TZ7Mdsb1mk1pI9uO492hYD56Z3INX69D-IjQOQblzg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:43:55 GMT
etag: "67c7a034b8adc33d5b90bf9612aae4a16a127e3e"
content-type: image/jpeg
age: 7612
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f50c34bc30a732593e8fe465055a44ff
af100925cba1be716fd2200715d6136bd7f0c5bc
703049736ccc8815945d69634059c4cd39533417e0969107d460c36a6787c761
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5078
x-amzn-requestid: b6177371-a8ba-4541-a48d-21bd806e866e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0erUHT-IAMFWKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ab15-157ed5b700e0aad5481f5c0f;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:04:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Vlo8vCUrKDtvhAGHSYKMmPk-wVNgx9OlU3ZVrpgG0tgk8ZBllAtXNQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:58 GMT
age: 12529
etag: "af100925cba1be716fd2200715d6136bd7f0c5bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/images/assets/logo_ios_152x152.png
404 Not Found 574 B URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/images/assets/logo_ios_152x152.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e79db5759649e22088454014c86c8b99
2068f9abbb21e94e988a34a955def69792ca2cae
4d8e42e2c15b80181bf8b4ff246cd2d0751ec5631196baed5c21a9a2d67e7922
GET /online/images/assets/logo_ios_152x152.png HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Wed, 14 Sep 2022 23:50:47 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692197; includeSubDomains
content-length: 574
X-Firefox-Spdy: h2
gloomyunfinisheddivisor.juanperez109.repl.co/online/Images/favicon.ico
200 OK 1.6 kB URL HTTP/2 gloomyunfinisheddivisor.juanperez109.repl.co/online/Images/favicon.ico
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b700b544f2fa87e37e6b728fef00fcb0
c0735fa743392c2f3032c22d241854b88832cdb7
f20a33fd40173f122bec15a105374059fb3ec612d51146485ed84ef0001f2f03
GET /online/Images/favicon.ico HTTP/1.1
Host: gloomyunfinisheddivisor.juanperez109.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/online/login24b8.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
date: Wed, 14 Sep 2022 23:50:47 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7692197; includeSubDomains
content-length: 1559
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e3dd91ffaf63d9271b3d28abf903c5a1
77eb6461215211c3c83887171aed13607cdcbfda
93d7afd61a8ef9d9ff996358d94987a4367c4e7f08fcc77be82a6dd1a8cd6574
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 23:50:47 GMT
Server: ECS (amb/6BA4)
Content-Length: 471
sifo.bancogalicia.com.ar/requestserver/script/v1/q4okr8/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 145 kB URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/script/v1/q4okr8/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (938)
Size 145 kB (144750 bytes)
Hash 7fd9ab198d78ad153ca047cb28180a99
5a48a5d723f3725549150ac030225d1b8c22dc05
677120220b5b85c98795e5fb30b9f270746fa37789e5054bd502035961f74be1
GET /requestserver/script/v1/q4okr8/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Wed, 14 Sep 2022 23:50:47 GMT
Content-Type: application/javascript
Content-Length: 144750
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 0 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Wed, 14 Sep 2022 23:50:48 GMT
Content-Length: 0
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 115 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 063a7a6155cbb605a7607aa53373bbc2
3ddc4ba8c22f9a7a9cc11eafb4829f7bda7eac20
3474ed9797fc12fb37cec95c96661c3b9b15ed3083ef9706b4c203896af86eb8
POST /requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 9486
Origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Wed, 14 Sep 2022 23:50:48 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
set-cookie: herok=2886860804e51Mv4mft82KKlkrR5rbjia8jojCHF; Expires=Thu, 15-Sep-2022 00:20:48 GMT; SameSite=None; Secure
kirby=2886860804e51Mv4mft82KKlkrR5rbjia8jojCHF; SameSite=None; Secure
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
sifo.bancogalicia.com.ar/requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 0 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------231799931718321284762064615341
Content-Length: 74670
Origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
Connection: keep-alive
Referer: https://gloomyunfinisheddivisor.juanperez109.repl.co/
Cookie: herok=2886860804e51Mv4mft82KKlkrR5rbjia8jojCHF; kirby=2886860804e51Mv4mft82KKlkrR5rbjia8jojCHF
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Wed, 14 Sep 2022 23:50:48 GMT
Content-Length: 0
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: https://gloomyunfinisheddivisor.juanperez109.repl.co
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
34.149.204.188
23.36.76.226
93.184.220.29