r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3382
Expires: Sun, 08 Jan 2023 10:16:45 GMT
Date: Sun, 08 Jan 2023 09:20:23 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash e4bdd77c0369662aa71ce2d01fd3edab
0ab1c5857e200e7e7946424c2c844537bfbb9775
a163c19fcc8fcf985e8df6ad4bd7ce73912b3df892d8236c70f9bc80820b26da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A163C19FCC8FCF985E8DF6AD4BD7CE73912B3DF892D8236C70F9BC80820B26DA"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4859
Expires: Sun, 08 Jan 2023 10:41:22 GMT
Date: Sun, 08 Jan 2023 09:20:23 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 89a058935fd04697c87e9441fbb466a9
59b5b08119374b1da34cff7e43a7c6dc80103f6e
3a3261f495323ff0f60067b2930b8d0e5e4e5cd6ae9b14929a88047587b735da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A3261F495323FF0F60067B2930B8D0E5E4E5CD6AE9B14929A88047587B735DA"
Last-Modified: Sat, 07 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3983
Expires: Sun, 08 Jan 2023 10:26:46 GMT
Date: Sun, 08 Jan 2023 09:20:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 08 Jan 2023 08:48:16 GMT
content-type: application/json
age: 1927
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fBTHgGNmLNzzTOoUWvwFhEYRZhWl08yOAodIFS9tUZEjnY3bH3p4EYM4VPGpZOGG9EHjq/HD2s8=
x-amz-request-id: J27WTTAFY12JCE1J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 08 Jan 2023 09:15:43 GMT
age: 280
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 08 Jan 2023 09:20:23 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 08 Jan 2023 08:33:43 GMT
age: 2801
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8589b6a84dd5a09ec546aff38bbd2515
1c3a3d8a69ae7a3ebda64292caf0e0f5968e81f7
f013da155203f0509d56e8174c2ae5ed23aad413b4391f276efd388519743b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1579
Cache-Control: max-age=87165
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:24 GMT
Etag: "63b9362a-1d7"
Expires: Mon, 09 Jan 2023 09:33:09 GMT
Last-Modified: Sat, 07 Jan 2023 09:06:50 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.42.234.253101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.234.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gTmX3DJaEuJOkXxYPX1auQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ubXLYRDl48jgCJygPJuCtPl1ivo=
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash abf10ca18c944927de1d95fad46c6741
715f02fc3430b52893a6ecb60086bd2a1e7d532f
a1c9996595cfa8d40860da998c1ecb7abafa1d70e6592b9810a2e7441c13006c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A1C9996595CFA8D40860DA998C1ECB7ABAFA1D70E6592B9810A2E7441C13006C"
Last-Modified: Fri, 06 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19283
Expires: Sun, 08 Jan 2023 14:41:49 GMT
Date: Sun, 08 Jan 2023 09:20:26 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3332
Expires: Sun, 08 Jan 2023 10:15:58 GMT
Date: Sun, 08 Jan 2023 09:20:26 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3332
Expires: Sun, 08 Jan 2023 10:15:58 GMT
Date: Sun, 08 Jan 2023 09:20:26 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3332
Expires: Sun, 08 Jan 2023 10:15:58 GMT
Date: Sun, 08 Jan 2023 09:20:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 407fef75-2217-4da7-8ea8-b5ede48a0615
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eNKshEEvoAMFkMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b524b6-72ca4e7b3034e7ac1f3fa1ed;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 07:03:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xOpZDrVh8MsfFqh0HuJJIWFvlgIm0jUE73p9MpgRA1PO_VAv0vP2nw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 16:43:14 GMT
age: 59832
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F795aec6e-490f-4147-9f31-26c48fd35480.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F795aec6e-490f-4147-9f31-26c48fd35480.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a1a3e91a34aed9411dfe83ee74395a4
c599bec4f1663b195111f0e8a07ba33545d36606
636b5ffb9b63ee08cbb0f7105286cd8942667bfa20608f6c4054dea47b626d86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F795aec6e-490f-4147-9f31-26c48fd35480.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8766
x-amzn-requestid: 21279eee-1547-4799-bd9f-8317d61b2a3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDuHExgoAMFaBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e65a-23be0aac77a8dc221a1a5dcb;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DG_wUOa37oYkAWHLOWrVm3rZjMihFgQja-gLFfAO8O5gVtPg8yar4Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:41:55 GMT
age: 41911
etag: "c599bec4f1663b195111f0e8a07ba33545d36606"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff46c6dc4-4e33-494e-b1dd-d2da59accb42.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff46c6dc4-4e33-494e-b1dd-d2da59accb42.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b9822ea0495a55cff2c979c1abf85e9
67f2888ed156e249c97ba1fe12df18c850b7c019
94c9114c3b17c2ecc5783c3da644b2cdd9eb83ae8cd705e78a99bc4d5a5e9514
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff46c6dc4-4e33-494e-b1dd-d2da59accb42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6455
x-amzn-requestid: 758a4992-bb36-41ca-8152-7b1497319108
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDxEFraIAMFYjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e66d-458a3fc7350017c32a591ee0;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QlOiSpajpHa_3AkVweQdbrfxNR1v8ehm55ar_GEH0EKiLqljmj1u5A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 22:05:53 GMT
etag: "67f2888ed156e249c97ba1fe12df18c850b7c019"
content-type: image/jpeg
age: 40473
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30c53ae078b112f7186e910c38898233
d3c58c28f0734f98bed64a26ede077464c3ad3f2
8f7dd1cf9f1472468a7caaf67a8f9c15bfe8836badcfb3249a9a8a7a6c3c0533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13787
x-amzn-requestid: 2598b4fe-a032-47d7-8e6c-cfdcfbe9d64a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDvYE35IAMF1Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e662-574eb7370aac63dd531d6b75;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cd50TSdgJPa-oMD9VpvWgVF9DMls8TmQqVUNNj5d6BPlVnN1_3vTUA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 22:05:52 GMT
age: 40474
etag: "d3c58c28f0734f98bed64a26ede077464c3ad3f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0546bef00f303b12de4354291c504cad
2c8e60803dee7d21b198a92aa187b23a4dce2f43
736bad079c239fa69fab918c209ba3b2a8b7b15616a49871e527d5694670df67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8127
x-amzn-requestid: 8111f713-0a7a-4b10-ade5-1c7aa6e06677
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDvCE_ooAMF7gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e660-2b422a7d2dc4a28b24125d1e;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GFANyQVbYkFcVTnvUq5ELpsTsgAFaYXhZGUPHWVWixXrnsH6jBavrA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:46:52 GMT
etag: "2c8e60803dee7d21b198a92aa187b23a4dce2f43"
content-type: image/jpeg
age: 41614
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2abe0388f11bae93f827a971bd29802
a57915c3b8388bc23c3a677ba12cc0525d949c2c
d23c15ca723fe73f6893703c7d1830034182fb1c9c620837313774c62368fa06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F753d022b-5cb9-4f9b-b520-756c952710b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10544
x-amzn-requestid: 04bdd2a7-b3dd-434b-833c-7101a1da9da7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDy1E_goAMFmgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e678-3468e4a9174280c146f28962;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:39:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BTPEBPH5icsKe4sSjs8d_ILObhQcrFYwZG6VnW33Wv6lQzEp_AzcnQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 22:37:47 GMT
age: 38559
etag: "a57915c3b8388bc23c3a677ba12cc0525d949c2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 315edeafe1715f46de7d38be371473a8
25e357166d0ddfff3e60f9042d56f37c1ab7163a
9869582721de4f610dca5030b9a703863d2eae2667061b2f722aebdaf60468e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
142.250.74.168200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5QM5P4Q
IP 142.250.74.168:0
File type ASCII text, with very long lines (1759)
Hash 2c2d2753f162c5021b520b50204894f4
5ebced8ef06735627d30ba93cfcb65c86e31bd5f
669bc2fbdcfa2f5bc3dcfc20f1c5cb6a53b43be9b80320d8bc2c68addb24f94c
GET /gtm.js?id=GTM-5QM5P4Q HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 08 Jan 2023 09:20:27 GMT
expires: Sun, 08 Jan 2023 09:20:27 GMT
cache-control: private, max-age=900
last-modified: Sun, 08 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46785
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 315edeafe1715f46de7d38be371473a8
25e357166d0ddfff3e60f9042d56f37c1ab7163a
9869582721de4f610dca5030b9a703863d2eae2667061b2f722aebdaf60468e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/keyboard-regular.png
34.149.204.188200 OK 317 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/keyboard-regular.png
IP 34.149.204.188:0
File type PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash bf09e16a3ceadf8a957789465c672a0e
f0a8d69e3d69bf181f66ecaa98087e1c8f6c5541
46a00d51288fbdd6cb645a05f7907b8b67c1e3e5b77f0e6200d2e9ac7dca9560
Analyzer Verdict Alert openphish Banco Ciudad
GET /index2_files/keyboard-regular.png HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-length: 317
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
34.149.204.188200 OK 13 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5861)
Hash 57368c272b8a55a5fa70dfbf409ab0cd
7327a27de7a292ca0aa940548cb93babe0b97a32
7889feb28ae691054a7de14258bd29d4df350b66f62527f3a149a9df9a0e6ddb
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2.php HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:26 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523649; includeSubDomains
x-powered-by: PHP/7.4.21
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/colors.js.descarga
34.149.204.188200 OK 755 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/colors.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (755), with no line terminators
Hash 8a0ccd362c3f22c9cf239d05b210a994
5865d553986f59538f56eed1a27c490a9f6bb0b1
830c8c46ae7149f8c395c44b9089d0a12ccca34449d2a8b1992186b059c43fd9
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/colors.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 755
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/runtime.ec2944dd8b20ec099bf3.js.descarga
34.149.204.188200 OK 1.5 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/runtime.ec2944dd8b20ec099bf3.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1451), with no line terminators
Hash d68ae1d68307abe5cbce649d966e97f1
21109b3561b5a6c3ed51bc3015962f05da8e57b3
f6d14a5c40a406c335c7aea3f6983070bb59111b470bdf39bd7e1c3f4618b9f4
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/runtime.ec2944dd8b20ec099bf3.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 1451
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/4.png
34.149.204.188200 OK 6.2 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/4.png
IP 34.149.204.188:0
File type PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash 3060236dd0018dfbc4cb7a6cf0a3ec68
6c8496aa09c8262a23b7923ca8571f93e36b90d8
c0e6f30e7bbb291540bdc48ead3ce0c41a9c99cf813e521572225a46215e7931
Analyzer Verdict Alert openphish Banco Ciudad
GET /index2_files/4.png HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-length: 6233
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/ciudad.svg
34.149.204.188200 OK 4.5 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/ciudad.svg
IP 34.149.204.188:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3283)
Hash c73e5d18223746a44d6d2fc666e9e804
4e0e21ce77d00569449cb264229b347300038783
69c24732e6b7afebfc32b64f5dc465aed7c1e5ae2083d8a4327931618f323f17
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/ciudad.svg HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-length: 4511
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/popper.min.js.descarga
34.149.204.188200 OK 19 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/popper.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (19063)
Hash 6cd956453e307bfd2ce4bfb0648b9f7d
a43367193adc1258902e5b68ad0cda6cf0f9ff8f
625b022a42ed5d9c39911e42050f4fd9834ea039af978b7716f7800ade95eb55
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/popper.min.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 19197
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/bootstrap.min.js.descarga
34.149.204.188200 OK 51 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/bootstrap.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (50277)
Hash 46b549bdc90920f18a911f186b9dd75c
3c639c4af5c036a6ee364215bd12c0b12937827d
1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/bootstrap.min.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50564
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/jquery-3.5.1.slim.min.js.descarga
34.149.204.188200 OK 72 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/jquery-3.5.1.slim.min.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (65245)
Hash 767a77430d12bd654d8f0c92cc21298c
75c2ff61e87f9ae41f55f4e845812aad189ab9af
c46dc051ce81c4af2b2096abbf885ae4ba7467ff5db0f0106ceee928cf3658a3
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/jquery-3.5.1.slim.min.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 72379
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/analytics.js.descarga
34.149.204.188200 OK 50 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/analytics.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1325)
Hash d40531c5e99a6f84e42535859476fe35
a901817d77b2fe5259c298c91bc65c54d7f8a1a9
a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/analytics.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 50205
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/gtm.js.descarga
34.149.204.188200 OK 112 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/gtm.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (1615)
Size 112 kB (112339 bytes)
Hash a62703f02b9e358ea0ebf5f14b768411
6c9fc592a82fa258015aa72eb2c36594fe51cb96
69e68184ffe4bcbb1643904ffa7edf803bec7cd57d578968b69515a789a72a95
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/gtm.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 112339
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
34.149.204.188200 OK 143 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/polyfills.78e7bb2b516c2ee870f0.js.descarga
IP 34.149.204.188:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 143 kB (142683 bytes)
Hash 050f5593a795beffaae3aa1af2f42c6d
6f09825e9255091665f31ae93fa12c47dae4a4c2
e428b9c4a2a312c519cb59eef4b605756f125ed3a53fa975058b737748fb2b47
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/polyfills.78e7bb2b516c2ee870f0.js.descarga HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-type: text/plain; charset=utf-8
content-length: 142683
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&a=109718401&t=pageview&_s=1&dl=https%3A%2F%2Fbd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co%2Findex2.php&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1346232106&gjid=165998126&cid=1137749142.1673169616&tid=UA-160231695-1&_gid=269960644.1673169616&_r=1>m=2wg1205QM5P4Q&z=1894076252
142.250.74.46200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=109718401&t=pageview&_s=1&dl=https%3A%2F%2Fbd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co%2Findex2.php&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1346232106&gjid=165998126&cid=1137749142.1673169616&tid=UA-160231695-1&_gid=269960644.1673169616&_r=1>m=2wg1205QM5P4Q&z=1894076252
IP 142.250.74.46:0
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&a=109718401&t=pageview&_s=1&dl=https%3A%2F%2Fbd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co%2Findex2.php&ul=en-us&de=UTF-8&dt=Banco%20Ciudad&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAAC~&jid=1346232106&gjid=165998126&cid=1137749142.1673169616&tid=UA-160231695-1&_gid=269960644.1673169616&_r=1>m=2wg1205QM5P4Q&z=1894076252 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
date: Sun, 08 Jan 2023 09:20:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
34.149.204.188200 OK 240 kB URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
IP 34.149.204.188:0
File type ASCII text, with very long lines (65307)
Size 240 kB (240530 bytes)
Hash 4ae1cffec0d12672e18b3c21a920eeb9
2b93cd16134d27a0893171d8410a120c8d1efdcc
12ec9ce079aefbcd306de6ec2859927dc4aed3e6053b79078ca1b06ffac04fb5
Analyzer Verdict Alert openphish Banco Ciudad
GET /index2_files/styles.542f8738520c301b6503.css HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:27 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523648; includeSubDomains
content-length: 240530
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash bca7f62d320a595159ceae1b30ef4c65
0e0c7a42f0d017f617b40aea757cf0a0a4d71d9a
e30f2266b5b10dd868954bba127f6a8e85ba6f8422b565ca17aee0e9074b9d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=1137749142.1673169616&jid=1346232106&gjid=165998126&_gid=269960644.1673169616&_u=YEBAAEAAAAAAAC~&z=275551672
173.194.222.157200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=1137749142.1673169616&jid=1346232106&gjid=165998126&_gid=269960644.1673169616&_u=YEBAAEAAAAAAAC~&z=275551672
IP 173.194.222.157:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-160231695-1&cid=1137749142.1673169616&jid=1346232106&gjid=165998126&_gid=269960644.1673169616&_u=YEBAAEAAAAAAAC~&z=275551672 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 08 Jan 2023 09:20:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash bca7f62d320a595159ceae1b30ef4c65
0e0c7a42f0d017f617b40aea757cf0a0a4d71d9a
e30f2266b5b10dd868954bba127f6a8e85ba6f8422b565ca17aee0e9074b9d99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
34.149.204.188404 Not Found 598 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 261db32b1cb632a4a81b08cee343a651
66fc203d964e10369c0b29ba43828e057a1016eb
97a931d91f11fea17876bd95331b6f1dc4f648f7e80556d7585c4e52fb2473b7
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/GuardianTextSans-Medium-App.aa2f0a6e826c5f02646a.ttf HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:28 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 598
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
34.149.204.188404 Not Found 599 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a9a42b012cf84583b7c9e8a8216364c0
0f5d4416ab162c686c3ef8d55d85dc7978977a2d
d34ccc5d66614d1a1aa8bc8666e599f2763a8d0ad9ff4ceea2a8109acc345d92
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/GuardianTextSans-Regular-App.2648b97ab884e20f4b2b.ttf HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:28 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 599
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2
34.149.204.188404 Not Found 587 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1ce616221088b6a484a44b1bfaa3520b
0079c8a13e169ff082ddb0c3194d4dab4248c2d3
71c5b3ae3b21d50a06fcfa6acc5d1ac9e0a72be5ed0206cb273fd76674008846
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/Roboto-Regular.73f0a88bbca1bec19fb1.woff2 HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:28 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 587
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/ojo-cerrado.64f85ad10ddae3a0cb7f.svg
34.149.204.188404 Not Found 582 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/ojo-cerrado.64f85ad10ddae3a0cb7f.svg
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dbeb4b0a9a6bae9ace2fe5e5c373236b
9ec331fb8330a30ddf647031b934a42ddb5232ec
330f210eff8d29ec763bb465ab57269f5b88eccf0db21166aa87e7ac7d49c5e5
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/ojo-cerrado.64f85ad10ddae3a0cb7f.svg HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:28 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 582
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash ec794a2a4639fa46c3993d2190d3050f
a1049676ea1df6d33f924095ce960bfe8de85d50
279e2df71d0b9a1dce5a3288bfebc1c3f383a09adc5261a15cdc1208cb766d6e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 09:20:28 GMT
Server: ECS (amb/6B8F)
Content-Length: 727
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.12b50e8557e9de979737.woff
34.149.204.188404 Not Found 586 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.12b50e8557e9de979737.woff
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b43a176d2c039d86ec7184d79d91f501
f972b5ba1df400b40f84bedeeff31e8c1ae7cc6a
c6f4b9f3a87853066f8b15947df6839d386fa5443ded88db7addaa77b4731b41
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/Roboto-Regular.12b50e8557e9de979737.woff HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:28 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 586
X-Firefox-Spdy: h2
bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.3e1af3ef546b9e6ecef9.ttf
34.149.204.188404 Not Found 585 B URL HTTP/2 bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/Roboto-Regular.3e1af3ef546b9e6ecef9.ttf
IP 34.149.204.188:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fc387a9b151e155332337faba3a1ead8
918767919ce850746c6f06a8104836cc2c3f9a23
3871ed67d2376ba3b734bdeabd214afe636727d696d5a79ce98b50a32d970c22
Analyzer Verdict Alert openphish Banco Ciudad
fortinet Phishing
GET /index2_files/Roboto-Regular.3e1af3ef546b9e6ecef9.ttf HTTP/1.1
Host: bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2_files/styles.542f8738520c301b6503.css
Cookie: _ga=GA1.4.1137749142.1673169616; _gid=GA1.4.269960644.1673169616; _gat_UA-160231695-1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
date: Sun, 08 Jan 2023 09:20:29 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6523647; includeSubDomains
content-length: 585
X-Firefox-Spdy: h2
analytics.redlink.com.ar/hblogin/p1.htm?url=https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
45.233.68.25302 Redirect 155 B URL HTTP/1.1 analytics.redlink.com.ar/hblogin/p1.htm?url=https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php
IP 45.233.68.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 96a3c98889299dc742cef1e3f837f6d7
5f279dcb9db73fb8b9aa6e4a96ed58559b095aef
de7b0fd139bd0be08cca4b3a25ec21f201959df8acfa555df1e01251276076fa
GET /hblogin/p1.htm?url=https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/index2.php HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
Connection: keep-alive
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://analytics.redlink.com.ar
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Sun, 08 Jan 2023 09:20:29 GMT
Content-Length: 155
analytics.redlink.com.ar/
45.233.68.25200 OK 246 B URL HTTP/1.1 analytics.redlink.com.ar/
IP 45.233.68.25:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash aac68c3f2973ae6bcf1e154e6bb4ff98
0ca9c79f5f9aef9d79220f109f634c1bc50c05d0
774185757f47228d9b59ce512424a72614e1ffb88e4bc0a9a38141a318021cf1
GET / HTTP/1.1
Host: analytics.redlink.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co
Referer: https://bd831e37-7dcd-494b-a734-693edbb374e6.id.repl.co/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 09 Oct 2015 19:27:42 GMT
Accept-Ranges: bytes
ETag: "0b291c82d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Date: Sun, 08 Jan 2023 09:20:29 GMT
Content-Length: 246
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash 0a76bc4e2fa0e0edd6b68319464497c4
11bc4f204a10f135dc6730e5a4e273983dbf5cb9
c0037d7269f99c9bd3be00ae457dadff5d1d938e1290728c9bc4d4fe8f9a39e8
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 09:20:32 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 07 Jan 2023 22:12:16 GMT
Expires: Sat, 14 Jan 2023 22:12:15 GMT
Etag: "11bc4f204a10f135dc6730e5a4e273983dbf5cb9"
Cache-Control: max-age=602073,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 332
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7863db9a4cb4b524-OSL