ocsp.digicert.com/
200 OK 471 B IP
Hash 9b4e6c72233070ef185ff980135e9555
2f14523a3f6f9532df3b872984fd23e156d2c465
5040e340e60b331b1569d52d66afcd5649a4121e2841d38cca0974e2a4c0af75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1158
Cache-Control: max-age=94106
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:09 GMT
Etag: "6374bbf5-1d7"
Expires: Fri, 18 Nov 2022 10:50:35 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19154
Expires: Thu, 17 Nov 2022 14:01:23 GMT
Date: Thu, 17 Nov 2022 08:42:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 17 Nov 2022 07:44:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3435
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4e84f361a3c81abc5d665a5f441452a8
7aa4b9cb0a7ba1daa514dbb48fe8e74fdf09b60d
04d64920cc8e6b096841938b0c1140889f5d7a04eabd440934a31f1c7ab90352
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04D64920CC8E6B096841938B0C1140889F5D7A04EABD440934A31F1C7AB90352"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16973
Expires: Thu, 17 Nov 2022 13:25:02 GMT
Date: Thu, 17 Nov 2022 08:42:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CBF4/Zucb5u64Txt0KbDDhovue1SbFXnZkhvi570LqJxuslk7V1NgBPCCbXS2Bgvlv2mBUHhOIw=
x-amz-request-id: 98193E7P228SXEZF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 17 Nov 2022 08:15:02 GMT
age: 1627
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/KiEaoA-9Zhc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/KiEaoA-9Zhc
IP
Hash 71f982d521eb06c4f3251c433ab89fa7
4419ad17a531fc6d6b7f2ca81f8d4191140c0446
f21642c9cb8597bee4738a9869b2b54446186ee156cbd380ee8c31775c8c1af5
POST /s/gts1p5/KiEaoA-9Zhc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 08:42:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 17 Nov 2022 08:25:01 GMT
cache-control: public,max-age=3600
age: 1028
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
IP
File type ASCII text, with very long lines (1921)
Hash 20b0ac76c80ac2c234eae634091d4ccc
b27a372d382420c94f4f15075c073e1e4de8abde
bcaf2f35adcd7eb905513131ea9b685fe17092fa1c926344b057ee4eaf16c262
GET /gtm.js?id=GTM-5QM5P4Q HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 17 Nov 2022 08:42:09 GMT
expires: Thu, 17 Nov 2022 08:42:09 GMT
cache-control: private, max-age=900
last-modified: Thu, 17 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dependentevilarchives.cuidadswe2.repl.co/index_files/ciudad.svg
200 OK 4.5 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/ciudad.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3283)
Hash c73e5d18223746a44d6d2fc666e9e804
4e0e21ce77d00569449cb264229b347300038783
69c24732e6b7afebfc32b64f5dc465aed7c1e5ae2083d8a4327931618f323f17
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/ciudad.svg HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-length: 4511
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/icono-login.png
200 OK 6.2 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/icono-login.png
IP
File type PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash 3060236dd0018dfbc4cb7a6cf0a3ec68
6c8496aa09c8262a23b7923ca8571f93e36b90d8
c0e6f30e7bbb291540bdc48ead3ce0c41a9c99cf813e521572225a46215e7931
Analyzer Verdict Alert openphish Banco Ciudad
GET /index_files/icono-login.png HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-length: 6233
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/serviceworker.js.descarga
200 OK 139 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/serviceworker.js.descarga
IP
Hash ec431e4821c417259968c9433c173d7a
e20a8ea582c50a6ecd98e38967b6206f3f5464cf
bf15ddcaa9d1e8dcc42d385983c30efdec4b85650c6d2452df31979b404e3160
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/serviceworker.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 139
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/colors.js.descarga
200 OK 755 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/colors.js.descarga
IP
File type ASCII text, with very long lines (755), with no line terminators
Hash 8a0ccd362c3f22c9cf239d05b210a994
5865d553986f59538f56eed1a27c490a9f6bb0b1
830c8c46ae7149f8c395c44b9089d0a12ccca34449d2a8b1992186b059c43fd9
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/colors.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 755
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/runtime.ec2944dd8b20ec099bf3.js.descarga
200 OK 1.5 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/runtime.ec2944dd8b20ec099bf3.js.descarga
IP
File type ASCII text, with very long lines (1451), with no line terminators
Hash d68ae1d68307abe5cbce649d966e97f1
21109b3561b5a6c3ed51bc3015962f05da8e57b3
f6d14a5c40a406c335c7aea3f6983070bb59111b470bdf39bd7e1c3f4618b9f4
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/runtime.ec2944dd8b20ec099bf3.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 1451
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/
200 OK 32 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19063)
Hash 5bd0a2d2e6f0c896f2b15529eab8de0c
becc8f6e224f1b91cf887d22f72a7c288d398c97
49e83f7cf4fadb31ac6effb39591f9910af386dbab901d64b784cb3606b671de
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET / HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/analytics.js.descarga
200 OK 50 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/analytics.js.descarga
IP
File type ASCII text, with very long lines (1325)
Hash d40531c5e99a6f84e42535859476fe35
a901817d77b2fe5259c298c91bc65c54d7f8a1a9
a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/analytics.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50205
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/jquery-3.5.1.slim.min.js.descarga
200 OK 72 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/jquery-3.5.1.slim.min.js.descarga
IP
File type ASCII text, with very long lines (65245)
Hash 767a77430d12bd654d8f0c92cc21298c
75c2ff61e87f9ae41f55f4e845812aad189ab9af
c46dc051ce81c4af2b2096abbf885ae4ba7467ff5db0f0106ceee928cf3658a3
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/jquery-3.5.1.slim.min.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 72379
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/bootstrap.min.js.descarga
200 OK 51 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/bootstrap.min.js.descarga
IP
File type ASCII text, with very long lines (50277)
Hash 46b549bdc90920f18a911f186b9dd75c
3c639c4af5c036a6ee364215bd12c0b12937827d
1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/bootstrap.min.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50564
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&a=150296957&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=690505657&gjid=1614547509&cid=350779792.1668674529&tid=UA-160231695-1&_gid=2016828423.1668674529&_r=1>m=2wgb905QM5P4Q&z=1626968279
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=150296957&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=690505657&gjid=1614547509&cid=350779792.1668674529&tid=UA-160231695-1&_gid=2016828423.1668674529&_r=1>m=2wgb905QM5P4Q&z=1626968279
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&a=150296957&t=pageview&_s=1&dl=https%3A%2F%2Fdependentevilarchives.cuidadswe2.repl.co%2F&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=690505657&gjid=1614547509&cid=350779792.1668674529&tid=UA-160231695-1&_gid=2016828423.1668674529&_r=1>m=2wgb905QM5P4Q&z=1626968279 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dependentevilarchives.cuidadswe2.repl.co
date: Thu, 17 Nov 2022 08:42:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/gtm.js.descarga
200 OK 112 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/gtm.js.descarga
IP
File type ASCII text, with very long lines (1615)
Size 112 kB (112339 bytes)
Hash a62703f02b9e358ea0ebf5f14b768411
6c9fc592a82fa258015aa72eb2c36594fe51cb96
69e68184ffe4bcbb1643904ffa7edf803bec7cd57d578968b69515a789a72a95
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/gtm.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 112339
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
200 OK 143 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 143 kB (142683 bytes)
Hash 050f5593a795beffaae3aa1af2f42c6d
6f09825e9255091665f31ae93fa12c47dae4a4c2
e428b9c4a2a312c519cb59eef4b605756f125ed3a53fa975058b737748fb2b47
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/polyfills.78e7bb2b516c2ee870f0.js.descarga HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 142683
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 95d38fabca722a84f17dd933a225c9eb
57162b6ce750cb4d572671e857704bddddb7db7b
a9df628bebc2ede321f9140681d93792903dafa2f9d9f5d19b05e5baf47a14fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 8345d8a2ca46c3b181a81d8626d0425f
5d9d088c5dca072bbc9ad23a15450e7af7829400
663b0e6c239177f35b5b48d4203ce95aabc0e5bab7911f5b1d9fb7624cac2e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=91995
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:10 GMT
Etag: "6374a83b-1d7"
Expires: Fri, 18 Nov 2022 10:15:25 GMT
Last-Modified: Wed, 16 Nov 2022 09:07:07 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=350779792.1668674529&jid=690505657&gjid=1614547509&_gid=2016828423.1668674529&_u=YEBAAEAAAAAAAC~&z=434170579
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=350779792.1668674529&jid=690505657&gjid=1614547509&_gid=2016828423.1668674529&_u=YEBAAEAAAAAAAC~&z=434170579
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=350779792.1668674529&jid=690505657&gjid=1614547509&_gid=2016828423.1668674529&_u=YEBAAEAAAAAAAC~&z=434170579 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://dependentevilarchives.cuidadswe2.repl.co
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 17 Nov 2022 08:42:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 95d38fabca722a84f17dd933a225c9eb
57162b6ce750cb4d572671e857704bddddb7db7b
a9df628bebc2ede321f9140681d93792903dafa2f9d9f5d19b05e5baf47a14fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
404 Not Found 598 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b3b99ae27b0f9d1595377caf7662ba60
6f94700d1525a5856ea877e56071c899c04b2bd9
8657ea34a641da845906401f5f319f1439e128b61009c634c278512ede6242f9
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.350779792.1668674529; _gid=GA1.3.2016828423.1668674529; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 08:42:10 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728556; includeSubDomains
content-length: 598
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
404 Not Found 597 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5bd90043db98c8ce5d4e168322dff1c
8a51d728684c45ca8583e058670662185d012a2a
ac8f2b25592bd3b65fa13716577d0c6f3594e6f652bf4663b2330e0aa1dd99e6
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.3.350779792.1668674529; _gid=GA1.3.2016828423.1668674529; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 08:42:10 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728556; includeSubDomains
content-length: 597
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LSbWN6VcVUTmBsu+NtilvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: u1Bepgu4LCNWUPnws5zhTCXwldE=
dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
200 OK 65 kB URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/index_files/styles.542f8738520c301b6503.css
IP
File type Web Open Font Format (Version 2), TrueType, length 64632, version 1.0\012- data
Hash 73f0a88bbca1bec19fb1303c689d04c6
463a07f5c66bf14e6d9d6e0f6d5e3fd3cb11f4ec
47107401d0adb375ab9aa167f9d62489a849d510e740a307b5a4db60e5db3562
Analyzer Verdict Alert openphish Banco Ciudad
GET /index_files/styles.542f8738520c301b6503.css HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Thu, 17 Nov 2022 08:42:09 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728557; includeSubDomains
content-length: 240530
X-Firefox-Spdy: h2
dependentevilarchives.cuidadswe2.repl.co/sw.js
404 Not Found 538 B URL HTTP/2 dependentevilarchives.cuidadswe2.repl.co/sw.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0d4305f941d59b8c89aa19467d9e9b0e
6bc54fc89c8975bd42219584d98754b65d8fd895
2d002435be4a8b4235e5c1e717ea2552a9b170fe1640652b08d44b5a870b96cb
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /sw.js HTTP/1.1
Host: dependentevilarchives.cuidadswe2.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _ga=GA1.3.350779792.1668674529; _gid=GA1.3.2016828423.1668674529; _gat_UA-160231695-1=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Thu, 17 Nov 2022 08:42:11 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7728555; includeSubDomains
content-length: 538
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash e26779de702dfe8bfb350df74ff66b07
67ff81546b8dfe7024570bb8a58ecf61afa4f6f7
ac08f541526d8eb577313b013ec88e6a344ca642c97de954d0418b3821c8f489
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=92949
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 08:42:11 GMT
Etag: "6374bbf8-2d7"
Expires: Fri, 18 Nov 2022 10:31:20 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:20 GMT
Server: nginx
Content-Length: 727
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11986
Expires: Thu, 17 Nov 2022 12:01:57 GMT
Date: Thu, 17 Nov 2022 08:42:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11986
Expires: Thu, 17 Nov 2022 12:01:57 GMT
Date: Thu, 17 Nov 2022 08:42:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11986
Expires: Thu, 17 Nov 2022 12:01:57 GMT
Date: Thu, 17 Nov 2022 08:42:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11986
Expires: Thu, 17 Nov 2022 12:01:57 GMT
Date: Thu, 17 Nov 2022 08:42:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b2f2035-e536-45fc-90d6-5a76f2b7a8f9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b2f2035-e536-45fc-90d6-5a76f2b7a8f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2bd274d60bc239b0328fe30a442ef2d9
fc4b5a6f389cf683c16e6c229e72b5bfdf9f00ed
f32dab0bb88b93fe3fe49c0b0974cb14e6bdca88d2eaab2d8b9fc42d36ee0dc0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b2f2035-e536-45fc-90d6-5a76f2b7a8f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12337
x-amzn-requestid: 783b124b-1f0e-445d-b19d-78ed9358c717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bX6VnGCBoAMFx8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ca423-6767360524d1bb9a7cf259fb;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 07:11:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xi0co5JQdy62MidhB6aUpqt8_18pj-ytLday1_6XauQ4v4B1K3qW0w==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 12:00:35 GMT
age: 74496
etag: "fc4b5a6f389cf683c16e6c229e72b5bfdf9f00ed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bcd9120-f81d-4ec1-9b84-ae23f33b9b8d.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bcd9120-f81d-4ec1-9b84-ae23f33b9b8d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c774a9a33f0c86087fe36fe18cf02db8
d81bf6504b30d50cf9cb14f8efca8e961f422a57
80f2913428758b1250218865a3e6697881ed3ed626f702c94fd0a5c7f354a2b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bcd9120-f81d-4ec1-9b84-ae23f33b9b8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8981
x-amzn-requestid: 4945a047-3048-4dfb-aba5-6cde2b52b240
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYEAG7roAMF30Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406e6-6928cd8c1439aac80444cd7b;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wQppfwe-si_G-X337pos0WMWkS1ilyURasLs0WsAF8pkm7nkeC6Mag==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 00:46:59 GMT
age: 28512
etag: "d81bf6504b30d50cf9cb14f8efca8e961f422a57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68952dd5-1d76-4468-b416-e2666a6f263a.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68952dd5-1d76-4468-b416-e2666a6f263a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60dc7d6a964f6cc9d5fd7f5b8157bb48
d2a6aed49fe4f63a9bce5657dc9e35b161635647
08981e3d1986277201d817c86b3860ce9fe13c99ba2c22e837391891988564d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68952dd5-1d76-4468-b416-e2666a6f263a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7204
x-amzn-requestid: a3ab7536-a4a7-4fe9-9924-b7497a5b18d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFGbIAMF_zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-5285b2d754b4d1746f0ea361;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: LVqqRtUzDCIowManorrE5-NKI0JBMAjLsCFhOlce0GPEikic7vR0jw==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:33:58 GMT
etag: "d2a6aed49fe4f63a9bce5657dc9e35b161635647"
content-type: image/jpeg
age: 40093
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9656cbd-d5f9-46cc-bec6-bcc983e12c29.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9656cbd-d5f9-46cc-bec6-bcc983e12c29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a1be294b5a3b2e68e8d9f9e0441ca04c
d3fe8f965ee69f3ecd08dfa34e14dcd7d7eed505
e7db15087e8012e37ccf50c6c86db5c7d6d9826439268b7f17d970229a3acba5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9656cbd-d5f9-46cc-bec6-bcc983e12c29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6134
x-amzn-requestid: 00909d7b-f5dd-4f73-932b-81f2aa689732
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: baqH0H_4IAMF6hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636dbd65-155b471f41ef040d4dd3033b;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 03:11:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Yxi3VDlH4PjKot8LJv9kzBlzS-6M0km9zUmGfbcVKACeZRFRa88rVA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 10:19:24 GMT
age: 80567
etag: "d3fe8f965ee69f3ecd08dfa34e14dcd7d7eed505"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddd65de2-2bf5-495c-a3ed-233e85d48816.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddd65de2-2bf5-495c-a3ed-233e85d48816.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6745e349c1a9954d4a040726d69ea8e6
ef7aa5dda798292b017327556df4b8a416de1fca
41d025ee826f4573dd57c9db5881083159a6ebec3827b1972a9eac48a720abc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddd65de2-2bf5-495c-a3ed-233e85d48816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7128
x-amzn-requestid: 8b582780-f2b5-488d-8f42-3da8bd8afb86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVGlYIAMFylg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-6257a731502ec66016cb0b41;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: jUZlwymS5g-FzXTJpV9O8BM75bddHS1fUT02yvcXN7mTil7-KOb_dA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:33:58 GMT
etag: "ef7aa5dda798292b017327556df4b8a416de1fca"
content-type: image/jpeg
age: 40093
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9d32fa3866dd741de610a61a93ad893
4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e
4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: uCIDqd8Nb4t4d3VN-UZ8OufrweFvW-RQFc7ZZkkYy9KIZJOh7eQIDA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 21:33:58 GMT
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
age: 40093
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 7158b198f6800ef78f60fc771ad9dc97
ff0fe0d4ad27742c42de78b91351d0f495829b59
351bc392ac71b2923d253d6274584eee06115b9d683a0c4bcf07312c33bd0bf1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 08:42:11 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 10:12:16 GMT
Expires: Wed, 23 Nov 2022 10:12:15 GMT
Etag: "ff0fe0d4ad27742c42de78b91351d0f495829b59"
Cache-Control: max-age=601508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 711
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76b72befee67b512-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4ee962a13c68a134448ef49af523fb9f
363510860b74c1fb1cd7f5f71f32c66cfba5591b
5ec7e7fe66d9e21faa4030fc653825e70b5a9580631c9a013b878fd0d59401d1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 08:42:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 21:03:43 GMT
Expires: Sun, 20 Nov 2022 21:03:42 GMT
Etag: "363510860b74c1fb1cd7f5f71f32c66cfba5591b"
Cache-Control: max-age=303090,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76b72bf00a31b4ed-OSL
analytics.redlink.com.ar/hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/
302 Redirect 155 B URL HTTP/1.1 analytics.redlink.com.ar/hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 96a3c98889299dc742cef1e3f837f6d7
5f279dcb9db73fb8b9aa6e4a96ed58559b095aef
de7b0fd139bd0be08cca4b3a25ec21f201959df8acfa555df1e01251276076fa
GET /hblogin/p1.htm?url=https://dependentevilarchives.cuidadswe2.repl.co/ HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://analytics.redlink.com.ar
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 17 Nov 2022 08:42:11 GMT
Content-Length: 155
analytics.redlink.com.ar/
200 OK 246 B URL HTTP/1.1 analytics.redlink.com.ar/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash aac68c3f2973ae6bcf1e154e6bb4ff98
0ca9c79f5f9aef9d79220f109f634c1bc50c05d0
774185757f47228d9b59ce512424a72614e1ffb88e4bc0a9a38141a318021cf1
GET / HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dependentevilarchives.cuidadswe2.repl.co
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 09 Oct 2015 19:27:42 GMT
Accept-Ranges: bytes
ETag: "0b291c82d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Thu, 17 Nov 2022 08:42:11 GMT
Content-Length: 246
hb.bancociudad.com.ar/assets/favicon.png
200 OK 8.9 kB URL HTTP/1.1 hb.bancociudad.com.ar/assets/favicon.png
IP
File type PNG image data, 322 x 322, 8-bit/color RGBA, non-interlaced\012- data
Hash 25a9870ada58fd297d30493deb73dc07
5621be8ef54b0aa4e108ff9a43c2f51900e7c33d
2bdf4ac46b037d1abce919e168a390a071fd0c32542b116cf6826ea26e6eab1b
GET /assets/favicon.png HTTP/1.1
Host: hb.bancociudad.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dependentevilarchives.cuidadswe2.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 08:42:12 GMT
Content-Type: image/png
Content-Length: 8925
Last-Modified: Fri, 04 Nov 2022 03:03:51 GMT
Connection: keep-alive
ETag: "63648117-22dd"
Expires: Sat, 17 Dec 2022 08:42:12 GMT
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: TS0196f39a=01aef80de2b30fa870cecb440781c8339f92805edf7dca11b23f02754ab64d78935f7d4022c1fe4365fb60f7815731575f877d09a2; Path=/; Domain=.hb.bancociudad.com.ar
34.149.204.188
23.36.76.226
45.233.68.25
93.184.220.29
0.0.0.0