r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7836
Expires: Tue, 06 Dec 2022 06:21:20 GMT
Date: Tue, 06 Dec 2022 04:10:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2924
Cache-Control: max-age=112159
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:44 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:20:03 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19853
Expires: Tue, 06 Dec 2022 09:41:37 GMT
Date: Tue, 06 Dec 2022 04:10:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 03:20:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3023
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pHR2yvPw+Vc3wajt+zk6qsmPxmKtkR5SCVYPN31ywvESetS8WC3Bc3guSdYd2P5jYKbcC/rrncs=
x-amz-request-id: 2NDY67J8VT723QM7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 03:46:57 GMT
age: 1427
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia
301 Moved Permanently 259 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 75834c7457fd350977a11cf977ab85de
1f3a4c45b39d00ed9b50f95e7140ed84d6e43232
7b874b39eec19511cf978d0e76472a829b515b987632e399e4bb8161bdd63091
GET /img/index_files/galicia HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 04:10:44 GMT
Server: Apache
Location: http://c1481833.ferozo.com/img/index_files/galicia/
Content-Length: 259
Keep-Alive: timeout=10, max=200
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 04:10:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 03:11:20 GMT
cache-control: public,max-age=3600
age: 3565
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia/
200 OK 25 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18845)
Hash 156099aa541e3d63332aed1e275e2020
f6c5c30ed0b0ec21081a1f60cacb5dbe89b4ef9b
f60404daebfe8a6bfbc4a961f4dd546da29808faa57d4d5be5bc1119cf76a3d5
GET /img/index_files/galicia/ HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:14 GMT
ETag: "16106-5ef20eccb6e7c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24559
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Content-Type: text/html
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2910
Cache-Control: max-age=107077
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:45 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:55:22 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wjt4q2skGAa+ciB4fOnoNA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XZS1ApuyZRrLv3sfPFhciLMiq2g=
c1481833.ferozo.com/img/index_files/galicia/index_files/bootstrap.min.css
200 OK 20 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash d77c1068a3646177f9a94955627b80dc
c8931f1f337ec4a63b685abd0bea724ff4fbb2d2
cb7b67b6016de1ece69f8e98d41c2998eb54bf7bc9dea62559c95a68473abee0
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/bootstrap.min.css HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "1e36e-5ef20ed052f8b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20122
Keep-Alive: timeout=10, max=200
Content-Type: text/css
c1481833.ferozo.com/img/index_files/galicia/index_files/detect.js.descarga
200 OK 509 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/detect.js.descarga
IP
File type ASCII text, with very long lines (1644), with no line terminators
Hash 2809a934f1688b18bc9d5fc0209d5e00
3b3cef5ba7f6b75f4ebb6cd1a7ae2fac50d41e79
5b2bb905b07e70dac18579486a97a963bc352d12888094b0552e54a9b66befab
GET /img/index_files/galicia/index_files/detect.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "66c-5ef20ed083112-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 509
Keep-Alive: timeout=10, max=200
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/analytics.js.descarga
200 OK 20 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/analytics.js.descarga
IP
File type ASCII text, with very long lines (1325)
Hash 93bde531cb4f65be97d29e35331ca13e
a893da1a81f92a8b58bba978dbe35780c97235b2
2172506c0cbb4a0f851f60c59097cf9e578de853c1382061395858f5d448ab8d
GET /img/index_files/galicia/index_files/analytics.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:17 GMT
ETag: "c436-5ef20ed020ec5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20073
Keep-Alive: timeout=10, max=200
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/FrontFunctions.min.js.descarga
200 OK 8.1 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/FrontFunctions.min.js.descarga
IP
File type Unicode text, UTF-8 text, with very long lines (28350), with no line terminators
Hash 74a7b99c74687e54ff9f60c3aa5b1122
0544c96af2c1f952bad4d1d7046d586c6eb161cb
c9aa96d3b5941bc0f8537d642f3415c3b092879daae459f615657a673d3003d8
GET /img/index_files/galicia/index_files/FrontFunctions.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "6ec5-5ef20ed10e39e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8130
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash 4373a5aa59b4e412e37b9c74590bf836
3fa5f29f67f19f133a25f97ab3b930b5f62cfde1
e70e92a8e6b3fd69e09a4d28f0abbc7f5e0c7df4a2833dfe9d510c9b3611ed81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:46 GMT
Etag: "638d57ed-1d7"
Server: ECS (amb/6B88)
Content-Length: 471
c1481833.ferozo.com/img/index_files/galicia/index_files/customcarousel.min.css
200 OK 630 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/customcarousel.min.css
IP
File type ASCII text, with very long lines (1920)
Hash bba38d3bea7e2f4c9ad8199063b42b33
64c0555ddf60a1971a289c3268fcfbd2bb0797d9
111c1a6156e62696c66c05d1c226c7ed525d230e5f8d8223c5474bd9575150f9
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/customcarousel.min.css HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "79d-5ef20ed0677ab-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 630
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Content-Type: text/css
c1481833.ferozo.com/img/index_files/galicia/index_files/js
200 OK 224 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/js
IP
File type ASCII text, with very long lines (22462)
Size 224 kB (223796 bytes)
Hash 9e2f33ffa8542252af1b5282488ee62d
edf1b4c7d5eefa2fa22bb24de1afef07ac7c051d
10fbce2479bd7c3843d173556378ddd29187f3ab00b37a033fcc8e0900fc0654
GET /img/index_files/galicia/index_files/js HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "36a34-5ef20ed18fdd3"
Accept-Ranges: bytes
Content-Length: 223796
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
c1481833.ferozo.com/img/index_files/galicia/index_files/js(1)
200 OK 188 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/js(1)
IP
File type ASCII text, with very long lines (6000)
Size 188 kB (187739 bytes)
Hash f7263e6aa1f18717b6a377e193ad3360
054c3c5df89954441c88465b61ccb18e75aeec21
980601b25e13391a969b0affdaa6808cef4eff32d6d20fa22ed03a2b2996a7ce
GET /img/index_files/galicia/index_files/js(1) HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "2dd5b-5ef20ed1ac2f2"
Accept-Ranges: bytes
Content-Length: 187739
Keep-Alive: timeout=10, max=200
c1481833.ferozo.com/img/index_files/galicia/index_files/gtm.js.descarga
200 OK 132 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/gtm.js.descarga
IP
File type Unicode text, UTF-8 text, with very long lines (65323)
Size 132 kB (132040 bytes)
Hash fe655a0d42da768cd17d7973e37c7aa7
18a820b119f5005764411cf1defb209bfdc2ea68
6517863d0ebac56961f18bfb0b290f522715a7dd786edb065ebb1d328d7cea79
GET /img/index_files/galicia/index_files/gtm.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "81884-5ef20ed177f03-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=200
Transfer-Encoding: chunked
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/seguloginclientless
200 OK 436 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/seguloginclientless
IP
File type ASCII text, with very long lines (436), with no line terminators
Hash b5b11848c082822cdadac05e9f169809
d4373a43ca4cc74d1e3a9a1da6fc1c61853c38c1
b8f28cd9cc6257cdefca49414abb41ad8eabfaf681b33663da840e88d72ebfbd
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/seguloginclientless HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "1b4-5ef20ed278875"
Accept-Ranges: bytes
Content-Length: 436
Keep-Alive: timeout=10, max=200
c1481833.ferozo.com/img/index_files/galicia/index_files/sharedout
200 OK 387 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/sharedout
IP
File type Unicode text, UTF-8 text, with very long lines (65435), with no line terminators
Size 387 kB (386613 bytes)
Hash 9861fa51e74a108f05a388c4bc7547ec
6227ce8903aafc40485e4adda69f945bcd25ed4e
c4145a9e8ffd7f6e600cb97e9d5b54488499fec84e99b147ee7c48d171314395
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/sharedout HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "5e635-5ef20ed2b169b"
Accept-Ranges: bytes
Content-Length: 386613
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
c1481833.ferozo.com/img/index_files/galicia/index_files/launch-121f57795303.min.js.descarga
200 OK 88 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/launch-121f57795303.min.js.descarga
IP
File type ASCII text, with very long lines (32763)
Hash b3c52ad77a49f94f8af203c366b329ce
1846158229b999d7d8cc32f013842f954a5e9dbe
396f7e740f0b4221d6a146765277c87bbf3cb32baefcf2fad897a309138aa889
GET /img/index_files/galicia/index_files/launch-121f57795303.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "435b5-5ef20ed201a20-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/ad1a29c5.js.descarga
200 OK 116 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/ad1a29c5.js.descarga
IP
File type ASCII text, with very long lines (62720), with CRLF, LF line terminators
Size 116 kB (115962 bytes)
Hash 967d78f1fdd2c32abb5e4c8885577304
cec7a82d2c1065c60f1b1cbbb431819742b30e25
b2e24b9529777d4c760e2a978d95accf7871a0ee2d3932c584d9282854dd989c
GET /img/index_files/galicia/index_files/ad1a29c5.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:17 GMT
ETag: "979d0-5ef20ed03c05c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/saved_resource
200 OK 959 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/saved_resource
IP
File type ASCII text, with very long lines (959), with no line terminators
Hash e839bf471a5c6d390d59f37d139722ef
b76fd31a1a820997e39399dbbe71448047f4ae43
c93153ac3f59a9b53b5ae04c99bded904698ebed8ee2c9303b9503eabfc73631
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/saved_resource HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "3bf-5ef20ed2601d5"
Accept-Ranges: bytes
Content-Length: 959
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
c1481833.ferozo.com/img/index_files/galicia/index_files/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js.descarga
200 OK 543 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js.descarga
IP
File type ASCII text, with very long lines (864)
Hash 8ddf8ba3d6a00a02e1e5277d59a08399
98273e04578db79440ae6645848d1553b7a2a997
329a5cc75044b434042c442985b3e2988d57a0b0e21b7fb4e4334eb84da0c9ed
GET /img/index_files/galicia/index_files/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "3f3-5ef20ed2492a6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 543
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js.descarga
200 OK 358 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js.descarga
IP
File type ASCII text, with very long lines (433)
Hash 41bcf39f9d7b992852bb4bc7f8f5d754
a63d37ccf521322e6f125af64e0af9a7dee6e49c
1347f04698e281121676a030d033d51f3248017f446bd0b260156fc7126e000d
GET /img/index_files/galicia/index_files/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:46 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "244-5ef20ed23c786-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Tue, 06 Dec 2022 06:20:27 GMT
Date: Tue, 06 Dec 2022 04:10:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Tue, 06 Dec 2022 06:20:27 GMT
Date: Tue, 06 Dec 2022 04:10:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Tue, 06 Dec 2022 06:20:27 GMT
Date: Tue, 06 Dec 2022 04:10:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Tue, 06 Dec 2022 06:20:27 GMT
Date: Tue, 06 Dec 2022 04:10:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7780
Expires: Tue, 06 Dec 2022 06:20:27 GMT
Date: Tue, 06 Dec 2022 04:10:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e1b54923ba506fde6b21c5bfb51ccc8
366aa3ab0790c496ea51bc08d1f2ff3358530d9e
a993ca6dc9a1f854f4542f9221e4f90060825ea863974b5163a9d3e284dc4663
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10594
x-amzn-requestid: eee9f193-eef5-44bf-997a-877fa206749e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSyIHpGoAMF1fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64da-0a9190f7698dbf2f73bb1575;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T28mItwomGU8iDJ18lUF7ZrFuyh_P3ZTwUtA4AC5qZ5C5FQurDMgmQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:54:01 GMT
age: 22606
etag: "366aa3ab0790c496ea51bc08d1f2ff3358530d9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia/index_files/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js.descarga
200 OK 221 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js.descarga
IP
Hash 4d094e935d1758fb5a0715b63321cc30
57a4342f94b3f85e35c8b305542873a9d1c82a5f
9d65719adcbdff15d50923f142211bb24e935b2bcdb1435aae73e2bbe343e701
GET /img/index_files/galicia/index_files/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "15e-5ef20ed251776-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 221
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4193f05dfd1de8bf795f433d4387243
b76ea6ae9df756f131ec16b01cdc7ab19b2d01be
b56231f3c788519751528b849a442d5c7ed828ea4ce3321fd629ca27440ea6e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6920
x-amzn-requestid: 05ec2698-a5ee-4046-be77-0036755f2946
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwaEd-IAMF_-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64cf-783b236b79b1e9ba22098cb2;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:23 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RF_AmYN7VQghDpDX6kEyBEBZtvR8dfLpwuqk75bGpn8q2OMc46lVgA==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:31 GMT
age: 22936
etag: "b76ea6ae9df756f131ec16b01cdc7ab19b2d01be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3801236dc22938e1cc18947e90ea5326
5979d7dc3ba0eb61947282a4adeac8208b4148ae
3bd4eab29590ec3c316597abd2be65281cd9a6137add037ad57c093f1fca12e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5995
x-amzn-requestid: 25b34277-c486-4642-aea7-21e0598babc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzOGGjoAMF4kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e1-6f43ab8e0c1a5260327bce11;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzpOZW9e-54LuSSOigtmFRb0sUGpIRpqZ-UtINp-B_Uzk6lFPnb6dw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:25:46 GMT
age: 20701
etag: "5979d7dc3ba0eb61947282a4adeac8208b4148ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5529617b0748f2d8c82ef99c1ac116a8
a862b74508113ae72b56b9b3de0c75ba559b9032
376a82ae4a5b80f59fb746be79bca569b03a74c345845c7bbf15189964b0bb96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11469
x-amzn-requestid: f60a3f0d-38f7-4f82-bdd5-9e31814ab1d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuZGAXIAMFwuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-5b4b99e779a0aaa71a311a1c;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bWcuXixVA50JUynSO7ar3nWfjsTa5iOteSYq88bWPlQvz__1qfv7Uw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:49 GMT
age: 23338
etag: "a862b74508113ae72b56b9b3de0c75ba559b9032"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcb8fe0c4ba323ab2483fa290c291051
6706e02d6b95edc3a33c951f07d04b0fb7415b77
6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tsL8hmcWaBeKYVG2b4g7ebl-sQ0Z5jZaexEfvldfzq9COcOdzqLhUA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:49 GMT
age: 22918
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1b8c21-bea6-4053-8dea-90393eea45b7.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1b8c21-bea6-4053-8dea-90393eea45b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30d72693680b3ac91c0eee4d47a26196
cd923a5a3810bfe86be2eca4b97c739d76756d93
69ca9e172f6b0c5bf158022d533701b89282630deaa0ce7df27ed459c9bfe75e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1b8c21-bea6-4053-8dea-90393eea45b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8656
x-amzn-requestid: cfc71f7f-d1c6-47c9-8107-864701dbf3c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwkEHmIAMFUnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64d0-6705510852d26ae24b3e5ea4;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:24 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JVEVoNv1w1lqFYG0M8v2GK92-1MfPxn8SnZv5JZitWWEDuXJ4DwmqQ==
via: 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:41 GMT
age: 22926
etag: "cd923a5a3810bfe86be2eca4b97c739d76756d93"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia/index_files/51630000.js.descarga
200 OK 118 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/51630000.js.descarga
IP
File type core file (Xenix)\012- , ASCII text
Hash 8c4e3a70f133a38fa6bd5e6c86ebab03
ef2b21d945dc0899e134155b3c3f25a069aa2eb2
5442f5ba1ef9467c8cbffca444e379d796dc36fc6e2fdd239404d8950fbc459a
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/51630000.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:17 GMT
ETag: "7d-5ef20ecffa1ae-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 118
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/f.txt
200 OK 1.0 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/f.txt
IP
File type ASCII text, with very long lines (2257), with no line terminators
Hash a9d8a1f9bc8bcec30b66d5bf99fceb55
bddbc8668cb93aa28b7ebdff45edc703cafd2919
e5cbe9fe40968d6258bda40fab415b0796372281824262e86edb9aa5f3b74cb9
GET /img/index_files/galicia/index_files/f.txt HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "8d1-5ef20ed1089c6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1018
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Content-Type: text/plain
c1481833.ferozo.com/img/index_files/galicia/index_files/modules.d53d96d4fefc0e537bd8.js.descarga
200 OK 85 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/modules.d53d96d4fefc0e537bd8.js.descarga
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 3caaa8644257fccf76804c332d6ee64f
6741995acd7e8f1be92d053e31facbb93d1bfd7f
d988a880e6fa6f341a8b50e5ba98df7af46f48542d0d3ef21f4c7a8cdb32e74e
GET /img/index_files/galicia/index_files/modules.d53d96d4fefc0e537bd8.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "41ae1-5ef20ed235256-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/dispatcher-v3.js.descarga
200 OK 1.2 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/dispatcher-v3.js.descarga
IP
Hash a4630b9d3da3bba845510abf73c53859
6543de95aacd38ed6920d735f7fcaf846ebe2d03
4e3ba17d14a08f98165a8724fd6b525fdba14b7e5abebe4f1f0795a508cc142c
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/dispatcher-v3.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "1392-5ef20ed0acd09-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1228
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/yahoo-min.js.descarga
200 OK 3.0 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/yahoo-min.js.descarga
IP
File type ASCII text, with very long lines (6013)
Hash a5b2c161a424aeaf067d6246176d64ee
7293cb47259c7065ac91d48096c2a227bc812cbc
36c712dcb454d4b23a4e63d24a6adc9e503f0cf9a8faf3c4a94457fdd25d102f
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/yahoo-min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "1bab-5ef20ed2cacda-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3005
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/cp-v3.js.descarga
200 OK 12 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/cp-v3.js.descarga
IP
File type ASCII text, with no line terminators
Hash bc6573647ae421e4cd14dcdf34c877ce
a567ddefcd1cfc1bbbaf5323bdadba5795c95478
7fd90f2ec178b50f6924b27d80085370abdb66f52947d3a63d7f8e7a8f56512b
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/cp-v3.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "c-5ef20ed0677ab"
Accept-Ranges: bytes
Content-Length: 12
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/json-min.js.descarga
200 OK 2.2 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/json-min.js.descarga
IP
File type ASCII text, with very long lines (4764)
Hash 73caddd8ca193f8bbe1008199439f379
bb864f4af973871e416dc2cc2da18bba495f4606
204207a80c315adee6290dfbf2e00e7b96c153621b9d5cc2a732f1859f451705
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/json-min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "1337-5ef20ed1a70ea-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2204
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/keyboard.css
200 OK 275 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/keyboard.css
IP
Hash 03026484ff3ed14003ed15e7563e9931
84cd9b9c9f9643d9d10e4cf8145756cdfe641566
9f80bb36c3d476b6cc261ea273592912d9a180c03e39c041daf525cfa04441e4
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/keyboard.css HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "1ec-5ef20ed1bb13a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 275
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive
Content-Type: text/css
c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
200 OK 140 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (140038 bytes)
Hash 3a4df7079d9b37d0dd779f8c063ce03a
de06e613779c3c982a3e76627de92ed487a758c0
812bd2765cc7bb7b921f7d5cc9e0d3044d17d55858a5431a99905b57a2cbd70f
GET /img/index_files/galicia/index_files/default.min.css HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "12f64e-5ef20ed0cefe8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
c1481833.ferozo.com/img/index_files/galicia/index_files/simple-keyboard.css
200 OK 871 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/simple-keyboard.css
IP
Hash 44890b556529205fa312c21a0b93a7a3
b7d7a862c0e586b311e4be6f5c9b7193e3bcffd7
2a90530004faf9e08e48bbdd380c544f1ec36e7940624da859c76f1143fb0b80
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /img/index_files/galicia/index_files/simple-keyboard.css HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "ae6-5ef20ed29882c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 871
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive
Content-Type: text/css
detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.24267565976510264
200 OK 82 B URL HTTP/1.1 detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.24267565976510264
IP
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash ae11c9259e141875b33cbb6598aa1485
4d71dc1bd4621df68ee846fe3f9409606aabced4
ca2613f315c93819ed7c4a14d44dcf8b041a71c5e032bd0aec9b399a6f4eb491
GET /detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.24267565976510264 HTTP/1.1
Host: detectca.easysol.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 04:10:47 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
c1481833.ferozo.com/img/index_files/galicia/index_files/hotjar-584153.js.descarga
200 OK 5.3 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/hotjar-584153.js.descarga
IP
File type Unicode text, UTF-8 text, with very long lines (15929)
Hash b73abebd085f043935dded21c5fdaee3
ff29f8d6cf5624b2b8ea0c502a1b9911a12526e0
725e509d8d97a59bad0525bcdf7d46055a5c0d114810cb6ac3747911f6296655
GET /img/index_files/galicia/index_files/hotjar-584153.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "5574-5ef20ed147995-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5289
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/simple-keyboard.min.js.descarga
200 OK 5.4 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/simple-keyboard.min.js.descarga
IP
File type ASCII text, with very long lines (19664), with CRLF line terminators
Hash fa2ae80071e1ef732b9589f1ff31cb13
cee26cbd904e2a74b5d7e5f76d51ecbf78bc5826
93155dc3675e0282bf1d3b66975faa9fb5a6f4a3e2a7116d3ecdbe53cbb5983e
GET /img/index_files/galicia/index_files/simple-keyboard.min.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "4eff-5ef20ed2bab0b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5411
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/polyfill.js.descarga
200 OK 672 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/polyfill.js.descarga
IP
File type ASCII text, with CRLF line terminators
Hash 5dc5a228625422e92c9b5beb8c7b417d
67569836113125adbee2b90730d04ec5322e38dc
34feda018175e4ef4f4f13fdf594f49fe226a1f3f168b62b69c4d88adc493ccc
GET /img/index_files/galicia/index_files/polyfill.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "6f6-5ef20ed223147-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 672
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/keyboard.js.descarga
200 OK 1.9 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/keyboard.js.descarga
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 88342f45224d49f5f270f4e98afd1ac4
b84da59d784943f4625b92c714abe4240b92b01f
e1a7b946fdc7a2f409272580fa56bba14924ba0d2ae7d483a8565e4be7e1884a
GET /img/index_files/galicia/index_files/keyboard.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "1864-5ef20ed1cd631-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1864
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/eluminate.js.descarga
200 OK 42 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/eluminate.js.descarga
IP
File type ASCII text, with very long lines (65268), with CRLF line terminators
Hash 00a2494c0f8369a8f777f0648c50a89d
ed9a2d8bd7217f3b3bc4ac62ac6d21773590b79b
a1560b3946737d462dc35d133d49a3720170cc93b5acc99f5aade4ca399d4f49
GET /img/index_files/galicia/index_files/eluminate.js.descarga HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "25cb4-5ef20ed0ed447-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 42306
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: application/javascript
c1481833.ferozo.com/img/index_files/galicia/index_files/f(1).txt
200 OK 17 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/f(1).txt
IP
File type ASCII text, with very long lines (2772)
Hash 6d5b458014f6c17c0b6287e8dac0b15b
2b021139a4734051f488bc135c818b4c9ecd1e4b
9a7f7d26f0dac577b8db566a69bb0332c54fade010dff77f0a071aff41b1f71a
GET /img/index_files/galicia/index_files/f(1).txt HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "b394-5ef20ed0ee7cf-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17403
Keep-Alive: timeout=10, max=193
Connection: Keep-Alive
Content-Type: text/plain
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5670c32d73c3d5771a2d9396774a7eb9
3fb62916ff54f22a011e11730ba87fea48e5d239
062531ed89864b713048421c9639d4a6249e92f33ef4177206f1deb5d85a8757
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&gjid=1002850152&_gid=1937267240.1670299845&_u=aGBAiEABFAAAAEAAI~&z=350276463
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&gjid=1002850152&_gid=1937267240.1670299845&_u=aGBAiEABFAAAAEAAI~&z=350276463
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&gjid=1002850152&_gid=1937267240.1670299845&_u=aGBAiEABFAAAAEAAI~&z=350276463 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://c1481833.ferozo.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Dec 2022 04:10:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
detectca.easysol.net/detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js
200 OK 1.6 kB URL HTTP/1.1 detectca.easysol.net/detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js
IP
File type ASCII text, with very long lines (1640), with no line terminators
Hash aef7b7e1e7819c8d35e55d721f410939
9ef9629efb99fc8912d7d9f2a72660ec65155de4
f6d0448700281e0d7bae82dfdf56ed258c5e026bdaae7449bd4e679fd6a59e62
GET /detectca/scripts/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/detect.js HTTP/1.1
Host: detectca.easysol.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 04:10:47 GMT
Content-Type: application/javascript
Content-Length: 1640
Last-Modified: Tue, 24 Aug 2021 00:00:00 GMT
Connection: keep-alive
ETag: "61243680-668"
Accept-Ranges: bytes
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.woff2
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/Inter-Regular.woff2 HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x
200 OK 132 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x
IP
File type Unicode text, UTF-8 text, with very long lines (65323)
Size 132 kB (132068 bytes)
Hash 404ab893e3624382406bcf173ea826c4
814f17b52c8f67eb14a4895371f38c316d212410
d19b89b3c1b58bb9625a4c1a9f3eeda4d18484bfde4e52c4bea86a27d9354d3f
GET /gtm.js?id=GTM-M6B9RZQ>m_auth=TiByp1Z92r_vHHqYjmr5yQ>m_preview=env-6>m_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: *
date: Tue, 06 Dec 2022 04:10:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 132068
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 69d6e7d7a4f52bf8c54b6e8c7bd88a4a
c782a8791e56606bb83345ab4006dac83ea2d9a7
414bb632f1616fef1643a58f0f35bba3b6910dc437ba3afa84531382fd632164
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Etag: "638d98ac-118"
Server: ECS (amb/6B88)
Content-Length: 280
c1481833.ferozo.com/img/index_files/galicia/index_files/logogalicia.html
200 OK 57 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/logogalicia.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (804)
Hash 7c08d2537a26aed61fda343b88a9aa5c
82017fe9423f7e896f1aed0d37fb1a09b379bab4
1a632706b6fd8b91b9ebaa175f719a9e6e5d460d8a2138f9f133585fcf61e432
GET /img/index_files/galicia/index_files/logogalicia.html HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.2.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:19 GMT
ETag: "31bf1-5ef20ed20c9e7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
c1481833.ferozo.com/img/index_files/galicia/logo.png
200 OK 2.3 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/logo.png
IP
File type PNG image data, 140 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash 317c48a57bc7bfb38f6421d68ea795d6
11749c9eade31875a8d42d0add1d66b09f0630df
465d2570cd777b7581a2abc33a8c455e74b0367bb90743dc027701e127778089
GET /img/index_files/galicia/logo.png HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.2.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:14 GMT
ETag: "8ef-5ef20eccaf17c"
Accept-Ranges: bytes
Content-Length: 2287
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Content-Type: image/png
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.woff2
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.2.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash b967016c92599586200298d67c900ac5
14a6fd8d84b435e154c0ae357a9f8dc24c16e9eb
b266fccee1baec0b93927cf1385b1a3e6987424f00cbf0ac879fcc8f212df56c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2551
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:47 GMT
Etag: "638d8a7e-1d7"
Last-Modified: Tue, 06 Dec 2022 03:28:16 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/galicia-ui.ttf?8esgb8
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/galicia-ui.ttf?8esgb8
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/galicia-ui.ttf?8esgb8 HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.2.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:47 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.2149718266134636
200 OK 82 B URL HTTP/1.1 detectca.easysol.net/detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.2149718266134636
IP
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash ae11c9259e141875b33cbb6598aa1485
4d71dc1bd4621df68ee846fe3f9409606aabced4
ca2613f315c93819ed7c4a14d44dcf8b041a71c5e032bd0aec9b399a6f4eb491
GET /detectca/images/QjL8pgjJN3mpOxVuG7JxpI2OYsRMit/DetectCA.png?ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&sr=1280%20x%201024&url=http://c1481833.ferozo.com/img/index_files/galicia/&rf=&nc=0.2149718266134636 HTTP/1.1
Host: detectca.easysol.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 04:10:47 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DF3360B65E15FFB70A495C4A%40AdobeOrg&d_nsid=0&ts=1670299845064
200 OK 565 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DF3360B65E15FFB70A495C4A%40AdobeOrg&d_nsid=0&ts=1670299845064
IP
File type JSON data\012- , ASCII text, with very long lines (1006), with no line terminators
Hash 54f759d29533ee2987774e77ef3291a9
5237325ca4da26b6c7358ba81fd51c03afc26dad
e12ca6a979652f442da1ca02df97b60abcc67a727566fb055669d48fef9ef74e
GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=DF3360B65E15FFB70A495C4A%40AdobeOrg&d_nsid=0&ts=1670299845064 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://c1481833.ferozo.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcscanary-prod-irl1-1-v052-0f73f706c.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=67558427370394942892694028914492859855; Max-Age=15552000; Expires=Sun, 04 Jun 2023 04:10:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: T5eLaIzxS0A=
Content-Length: 565
Connection: keep-alive
gal.bgsensors.co/api/wb/b3f76076-f760-49d8-ab30-437b9b182ac7/60a375cb-568d-41f6-a2d9-0e5d6c6ad549/1244/?rfr=&hash=&dom=c1481833.ferozo.com&href=http://c1481833.ferozo.com/img/index_files/galicia/
200 OK 67 B URL HTTP/2 gal.bgsensors.co/api/wb/b3f76076-f760-49d8-ab30-437b9b182ac7/60a375cb-568d-41f6-a2d9-0e5d6c6ad549/1244/?rfr=&hash=&dom=c1481833.ferozo.com&href=http://c1481833.ferozo.com/img/index_files/galicia/
IP
File type PNG image data, 1 x 1, 1-bit grayscale, non-interlaced\012- data
Hash 06707af2ef27f407df4958d3abf2a9f7
874a600942cc18a6c71a96ee2e19fecd42886bfb
089ad5bf4831b6758e9907db43bc5ebba2e9248a9929dad6132c49932e538278
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /api/wb/b3f76076-f760-49d8-ab30-437b9b182ac7/60a375cb-568d-41f6-a2d9-0e5d6c6ad549/1244/?rfr=&hash=&dom=c1481833.ferozo.com&href=http://c1481833.ferozo.com/img/index_files/galicia/ HTTP/1.1
Host: gal.bgsensors.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 04:10:48 GMT
content-type: image/png
content-length: 67
x-frame-options: SAMEORIGIN
vary: Origin
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OShzDfYLd1UhlXk3U4uMIR%2Blj33KiVPagN8EKRFOeWcMf13epoHDlesjFlmLB1Oxf0fgsEvD6jFt2ta1cg3hUTIxNEC%2FM4nkXcjvHfk1XzddkyEuI2rUAB56VtfBvf40WcMq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77522c81d841b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/1.1 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2772)
Hash 4c734f2dee2775f34cf20236a1e454ce
8519539acac5a7086a839fc5534f9648c5b0de46
9a7a7b257d298e7db6db54901e7bf89361f015742c19276a81fae9e82efdd823
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Tue, 06 Dec 2022 04:10:48 GMT
Expires: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 6351308751113588399
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17396
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 280 B IP
Hash 69d6e7d7a4f52bf8c54b6e8c7bd88a4a
c782a8791e56606bb83345ab4006dac83ea2d9a7
414bb632f1616fef1643a58f0f35bba3b6910dc437ba3afa84531382fd632164
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Etag: "638d98ac-118"
Last-Modified: Tue, 06 Dec 2022 04:10:47 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js
200 OK 88 kB URL HTTP/2 assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js
IP
File type ASCII text, with very long lines (32763)
Hash 728f8e3526301a03588ace633f0bb6f5
96a5c698d252210d919a05bdeacf0c807306814b
4c2ab4845f61dea6e37f239073fa781636c359dd3550b0301ba0e77b424f8860
GET /87fc8b53a8b1/118d2b304f55/launch-121f57795303.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9e6fd0a59e71085ed8c04063c3bef56e:1668693899.426046"
last-modified: Thu, 17 Nov 2022 14:04:59 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 05:10:48 GMT
date: Tue, 06 Dec 2022 04:10:48 GMT
content-length: 88143
access-control-allow-origin: http://c1481833.ferozo.com
timing-allow-origin: *
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.woff
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/Inter-Regular.woff HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=192
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
c1481833.ferozo.com/Scripts/eluminate.js
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/Scripts/eluminate.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /Scripts/eluminate.js HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
c1481833.ferozo.com/img/index_files/galicia/index_files/saved_resource.html
200 OK 145 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/saved_resource.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5e610eda263540ba05be0d6b5cf807a2
269663c27bdb68d880847d4f7bd4b62796926c93
682e5b3b42807f8a40d9f12d20c12a824dbf1dfcda7fefab7c81a08a35c9bfca
GET /img/index_files/galicia/index_files/saved_resource.html HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0; cmTPSet=Y
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:20 GMT
ETag: "95-5ef20ed266b4d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 145
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive
Content-Type: text/html
c1481833.ferozo.com/img/index_files/galicia/index_files/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.3 kB URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/index_files/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2397)
Hash 5bc8e01ed61435444e02ebbbfb6c3488
a58080b2d6595196a4315514d3e2f7e3f40faaf5
1eba453433ead3f057aa3819aa2cc0b764b58c3608b9a2035bac75769da7b113
GET /img/index_files/galicia/index_files/box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0; cmTPSet=Y
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Last-Modified: Tue, 06 Dec 2022 04:06:18 GMT
ETag: "9cd-5ef20ed05104b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1315
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive
Content-Type: text/html
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.woff
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/fontawesome-webfont.woff HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0; cmTPSet=Y
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1fad8e834ba3c602a0fff059a7a40552
29d975e08d716f6d33e3c3bd6405a6322df6ca65
3802068c5eb245d9675ed4af5ed889bd9ec33b858b2a20b8c408f8e4f0d7fe9f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Dec 2022 04:10:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 05 Dec 2022 20:41:09 GMT
Expires: Tue, 06 Dec 2022 20:41:09 GMT
ETag: "29d975e08d716f6d33e3c3bd6405a6322df6ca65"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/galicia-ui.woff?8esgb8
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/galicia-ui.woff?8esgb8
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/galicia-ui.woff?8esgb8 HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CvVersion%7C5.5.0; cmTPSet=Y
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.google-analytics.com/collect
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 426
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: http://c1481833.ferozo.com
Date: Tue, 06 Dec 2022 04:10:48 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js
200 OK 543 B URL HTTP/2 assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js
IP
File type ASCII text, with very long lines (864)
Hash 6e70c064dcc46bddc302d38e13df7375
11a26413589f01e66bb8638a72b020bfce0df66e
73126989e913930819159af197416325de64064d2eb0c6e6ef5baa8d8a17768a
GET /87fc8b53a8b1/118d2b304f55/a128628dac2f/RC66fa2a34a0a9451089445bfcda97f3fc-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7f6ea0b801d7e2a4f0d5ec2acb0074dd:1668693900.209014"
last-modified: Thu, 17 Nov 2022 14:05:00 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 05:10:48 GMT
date: Tue, 06 Dec 2022 04:10:48 GMT
content-length: 543
access-control-allow-origin: http://c1481833.ferozo.com
timing-allow-origin: *
X-Firefox-Spdy: h2
galiciabanco.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 galiciabanco.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: galiciabanco.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Tue, 6 Dec 2022 04:10:48 GMT
DCS: dcs-prod-irl1-1-v045-05e780d2b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:02:56 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: 32FNzsBdQiY=
Content-Length: 2791
Connection: keep-alive
assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js
200 OK 358 B URL HTTP/2 assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js
IP
File type ASCII text, with very long lines (433)
Hash 31ea1a7be2ce884825de79c2b2b85636
bb090cfd383820961658b024f472706ed7fef996
9dddf9d548fe2c42b2bd155c1f23564b9ec191ef0f7181b77dd31614cc747d64
GET /87fc8b53a8b1/118d2b304f55/a128628dac2f/RC1699ac92c9d8400891bfa4b6e7a932be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7f6ea0b801d7e2a4f0d5ec2acb0074dd:1668693900.209014"
last-modified: Thu, 17 Nov 2022 14:05:00 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 05:10:48 GMT
date: Tue, 06 Dec 2022 04:10:48 GMT
content-length: 358
access-control-allow-origin: http://c1481833.ferozo.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js
200 OK 221 B URL HTTP/2 assets.adobedtm.com/87fc8b53a8b1/118d2b304f55/a128628dac2f/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js
IP
Hash 00aacf1a7ee46f4d76dbc88c13b50665
3f98aea9894054c0486320cbe587e7b1927856f6
e65b48d91b73b4adfa1c555c7f7a1a6729d4ea33d42580d901f5c5a0c0cd99f0
GET /87fc8b53a8b1/118d2b304f55/a128628dac2f/RCa6a6f4ccacd34f08a039964c04e81646-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7f6ea0b801d7e2a4f0d5ec2acb0074dd:1668693900.209014"
last-modified: Thu, 17 Nov 2022 14:05:00 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 05:10:48 GMT
date: Tue, 06 Dec 2022 04:10:48 GMT
content-length: 221
access-control-allow-origin: http://c1481833.ferozo.com
timing-allow-origin: *
X-Firefox-Spdy: h2
wup-ad1a29c5.us.v2.we-stats.com/client/v3.1/web/wup?cid=gamora
200 OK 565 B URL HTTP/2 wup-ad1a29c5.us.v2.we-stats.com/client/v3.1/web/wup?cid=gamora
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (565), with no line terminators
Hash 05eb65cd7eb12fc0b73684efd128fd6b
c37dc3eb0b5c1f605e91e3c2c67a6f8ea7e44004
3ef4b4a27fdab65c34301ddb25459e14904b69501ec6098e7a105b2c9c3b22c6
POST /client/v3.1/web/wup?cid=gamora HTTP/1.1
Host: wup-ad1a29c5.us.v2.we-stats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 565
date: Tue, 06 Dec 2022 04:10:48 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: fec2fc37-7d34-47db-874e-675d9a5a12ee
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.ttf
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/Inter-Regular.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/Inter-Regular.ttf HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CMCMID%7C61005852762023218723173682959846387342%7CMCAAMLH-1670904645%7C6%7CMCAAMB-1670904645%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1670307045s%7CNONE%7CvVersion%7C5.5.0; cmTPSet=Y; AMCVS_DF3360B65E15FFB70A495C4A%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=191
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ead0ac4ce19cef2471bae0458759d89
af02fd3fcd2e10cfa2458407c0c2e59a43e18517
507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
galiciabanco.demdex.net/event?d_dil_ver=9.5&_ts=1670299845601
200 OK 435 B URL HTTP/1.1 galiciabanco.demdex.net/event?d_dil_ver=9.5&_ts=1670299845601
IP
File type JSON data\012- , ASCII text, with very long lines (751), with no line terminators
Hash d648f2ef05076e17915f44b37efd76d8
f8c5471b3853c17c37ef98b1406dd95cae3704bf
cc65f8f8f8a76ab9fcefe6ac19b39c13813eaad9d73f6c5f059399c49aa52790
POST /event?d_dil_ver=9.5&_ts=1670299845601 HTTP/1.1
Host: galiciabanco.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 228
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://c1481833.ferozo.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-05ee5fd88.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=67558427370394942892694028914492859855; Max-Age=15552000; Expires=Sun, 04 Jun 2023 04:10:48 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: MSZICfh2TEM=
Content-Length: 435
Connection: keep-alive
www.google-analytics.com/g/collect?v=2&tid=G-R462ZWFJX5>m=2oebu0&_p=1707725335&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&sid=1670299845&sct=1&seg=0&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&dt=Online%20Banking&en=page_view&_fv=2&_ss=1
204 No Content 0 B URL HTTP/2 www.google-analytics.com/g/collect?v=2&tid=G-R462ZWFJX5>m=2oebu0&_p=1707725335&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&sid=1670299845&sct=1&seg=0&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&dt=Online%20Banking&en=page_view&_fv=2&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R462ZWFJX5>m=2oebu0&_p=1707725335&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&sid=1670299845&sct=1&seg=0&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&dt=Online%20Banking&en=page_view&_fv=2&_ss=1 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://c1481833.ferozo.com
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.google.com/g/collect?v=2&tid=G-NK1ZTDWVWL>m=2oebu0&_p=1707725335&_gaz=1&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&dt=Online%20Banking&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&sid=1670299845&sct=1&seg=0&en=page_view&_fv=1&_ss=2&ep.page_path=%2Fimg%2Findex_files%2Fgalicia%2F
204 No Content 0 B URL HTTP/2 analytics.google.com/g/collect?v=2&tid=G-NK1ZTDWVWL>m=2oebu0&_p=1707725335&_gaz=1&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&dt=Online%20Banking&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&sid=1670299845&sct=1&seg=0&en=page_view&_fv=1&_ss=2&ep.page_path=%2Fimg%2Findex_files%2Fgalicia%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-NK1ZTDWVWL>m=2oebu0&_p=1707725335&_gaz=1&cid=1879068883.1670299845&ul=en-us&sr=1280x1024&_s=1&dt=Online%20Banking&dl=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&sid=1670299845&sct=1&seg=0&en=page_view&_fv=1&_ss=2&ep.page_path=%2Fimg%2Findex_files%2Fgalicia%2F HTTP/1.1
Host: analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://c1481833.ferozo.com
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
galiciabanco.tt.omtrdc.net/rest/v1/delivery?client=galiciabanco&sessionId=c3b8c3566d714135a60489448acf1739&version=2.10.0
200 301 B URL HTTP/1.1 galiciabanco.tt.omtrdc.net/rest/v1/delivery?client=galiciabanco&sessionId=c3b8c3566d714135a60489448acf1739&version=2.10.0
IP
File type JSON data\012- , ASCII text, with very long lines (355), with no line terminators
Hash 85a31c842a1b6e54cbb6ca3c298fc229
8a17212701abc59caf0b894f3b3e7eed5cf386cc
c88b2ccfc650401d2ed4e6c2c790fded3f3534f17cef83ce5b61f2480a76c676
POST /rest/v1/delivery?client=galiciabanco&sessionId=c3b8c3566d714135a60489448acf1739&version=2.10.0 HTTP/1.1
Host: galiciabanco.tt.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Content-Length: 976
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200
Date: Tue, 06 Dec 2022 04:10:48 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
Access-Control-Allow-Origin: http://c1481833.ferozo.com
Access-Control-Allow-Credentials: true
X-Request-ID: 88eb5c6f7b512e4a56d3eabf7c8fae47
Timing-Allow-Origin: *
Accept-CH: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List
Content-Encoding: gzip
c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.ttf
404 Not Found 196 B URL HTTP/1.1 c1481833.ferozo.com/img/index_files/galicia/Content/fonts/fontawesome-webfont.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /img/index_files/galicia/Content/fonts/fontawesome-webfont.ttf HTTP/1.1
Host: c1481833.ferozo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/img/index_files/galicia/index_files/default.min.css
Cookie: cdContextId=1; bmuid=1670299844804-9CAE94B3-1523-40CD-8376-EA7609AAAE9B; _ga=GA1.1.1879068883.1670299845; _gid=GA1.2.1937267240.1670299845; _dc_gtm_UA-62726172-14=1; onb2_isreload=false; onb2_prevpath=/img/index_files/galicia/; _ga_NK1ZTDWVWL=GS1.1.1670299845.1.0.1670299845.60.0.0; _ga_R462ZWFJX5=GS1.1.1670299845.1.0.1670299845.0.0.0; AMCV_DF3360B65E15FFB70A495C4A%40AdobeOrg=179643557%7CMCIDTS%7C19333%7CMCMID%7C61005852762023218723173682959846387342%7CMCAAMLH-1670904645%7C6%7CMCAAMB-1670904645%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1670307045s%7CNONE%7CvVersion%7C5.5.0; cmTPSet=Y; AMCVS_DF3360B65E15FFB70A495C4A%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=10, max=193
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b159fdabe241a0f38997a068b31c58a
e97bd85cc2e0a389a07ffbe17f990678cb0955d5
3a825294334cd38686b167d31f0226c236f254228f159a12ade3c3b545dfa0d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6503
Cache-Control: max-age=169017
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Etag: "638e989a-1d7"
Expires: Thu, 08 Dec 2022 03:07:45 GMT
Last-Modified: Tue, 06 Dec 2022 01:19:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Tue, 06 Dec 2022 02:23:05 GMT
Expires: Tue, 06 Dec 2022 04:23:05 GMT
Cache-Control: public, max-age=7200
Age: 6463
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash 9a20b032c5f1d81fba2f07aae1c4aa53
bf5ebc48e6fcc2f5f0f21681cd5106cbaa544c56
387b351f5e28c394c86129e1be8dd5ee8cedfc635ae6ac8eb0c2e0755bd24525
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=106716
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Etag: "638dbea4-1d7"
Expires: Wed, 07 Dec 2022 09:49:24 GMT
Last-Modified: Mon, 05 Dec 2022 09:49:24 GMT
Server: nginx
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e388f1ab4ec88104f57cf23944ee684
39178c45ed645709cc388d5790b1b58a3272a62f
e33b88f6f77d90b65a8fed943a45623e51f1efbdae401a1652f24be68408dba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 267006cd6e6820ee4e423414c0fae7fa
0161f56b3a6d6d572a9aa4d1bffbaf2c58a20aa1
9eeb8a11521ab8adfc3a13ffb4534869818a68b8f7c72396a7f378b3e9e59f8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/936934836/?random=1670299845432&cv=9&fst=1670299844999&num=2&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 942 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/936934836/?random=1670299845432&cv=9&fst=1670299844999&num=2&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2135), with no line terminators
Hash 02a7d6d8ee100d443839cb12d62e4721
e53a868d6bdf2b244dee21a2fea1d74f57139c7c
037e9f03cd9811061364563eccf7ed8fd52dc2e65a32a0589a875c1c48284e2c
GET /pagead/viewthroughconversion/936934836/?random=1670299845432&cv=9&fst=1670299844999&num=2&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 942
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 04:25:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/936934836/?random=1670299844999&cv=9&fst=1670299844999&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 938 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/936934836/?random=1670299844999&cv=9&fst=1670299844999&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2131), with no line terminators
Hash 03f643afbd9cb631b242d4b86d0ed16c
54a9854c35fb748294c0b51a17df7d8d7f81c22f
786c162dfe8c8aa6c905cb521d6424f248c93ffb3b8613eb5a78ef508984f1b3
GET /pagead/viewthroughconversion/936934836/?random=1670299844999&cv=9&fst=1670299844999&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tiba=Online%20Banking&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 938
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 04:25:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com.ar/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-NK1ZTDWVWL&cid=1879068883.1670299845>m=2oebu0&aip=1&z=126504526
200 OK 42 B URL HTTP/2 www.google.com.ar/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-NK1ZTDWVWL&cid=1879068883.1670299845>m=2oebu0&aip=1&z=126504526
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-NK1ZTDWVWL&cid=1879068883.1670299845>m=2oebu0&aip=1&z=126504526 HTTP/1.1
Host: www.google.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb4546775cc1d422ba16d10df161ad0f
78dc3f527ab21015e1a9124d9c3a122e02399864
362060f74e7667ebe1cf348a59fb7912fd5569806ca84b4ef098f11a42e9a62b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-62726172-14&cid=1879068883.1670299845&jid=1307497934&_u=aGBAiEABFAAAAEAAI~&z=2125888826 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com.ar/pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.com.ar/pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/936934836/?random=1670252859239&cv=9&fst=1670252400000&num=1&guid=ON&eid=375603261&u_h=1080&u_w=1920&u_ah=1032&u_aw=1920&u_cd=24&u_his=3&u_tz=-180&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&ref=https%3A%2F%2Fonlinebanking.bancogalicia.com.ar%2Flogin&tiba=Online%20Banking&fmt=3&is_vtc=1&random=1667616965&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 04:10:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb4546775cc1d422ba16d10df161ad0f
78dc3f527ab21015e1a9124d9c3a122e02399864
362060f74e7667ebe1cf348a59fb7912fd5569806ca84b4ef098f11a42e9a62b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6bcf99cf6268833f1c595219acabc038
2b788a764087812085698d77dd9a0ce711d2270d
449780d702152ef7029115f1bffaf39d850f34288d51743fda24ad65ce5334db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=124307
Date: Tue, 06 Dec 2022 04:10:48 GMT
Etag: "638df9a7-1d7"
Expires: Wed, 07 Dec 2022 14:42:35 GMT
Last-Modified: Mon, 05 Dec 2022 14:01:11 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5yhjX6X_AdPhEIUOiGPqI_HJ4IJX7ITYYgpAemM1ClyqsLkqa3tyjQ==
Age: 2484
testdata.coremetrics.com/cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0
302 Found 0 B URL HTTP/1.1 testdata.coremetrics.com/cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0 HTTP/1.1
Host: testdata.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
HTTP/1.1 302 Found
Date: Tue, 06 Dec 2022 04:10:48 GMT
Server: Apache
Vary: Host
Set-Cookie: CoreID6=83161670299848295300686; path=/; expires=Sat, 05 Dec 2037 04:10:48 GMT
TestSess3=83161670299848295300686;path=/
Location: /cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&cvdone=p
P3P: CP="NON DSP COR CUR ADMo DEVo PSAo PSDo OUR IND ONL UNI PUR COM NAV INT DEM STA"
Content-Length: 0
Connection: close
cm.everesttech.net/cm/dd?d_uuid=67558427370394942892694028914492859855
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=67558427370394942892694028914492859855
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=67558427370394942892694028914492859855 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 06 Dec 2022 04:10:49 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y47AyQAAAJooYwN-; Domain=.everesttech.net; Expires=Wed, 06-Dec-2023 04:10:49 GMT; Path=/
everest_session_v2=Y47AyQAAAJooZAN-; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y47AyQAAAJooYwN-
Server: AMO-cookiemap/1.1
dpm.demdex.net/ibs:dpid=411&dpuuid=Y47AyQAAAJooYwN-
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y47AyQAAAJooYwN-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y47AyQAAAJooYwN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://c1481833.ferozo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0d492e21d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y47AyQAAAJooYwN-
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=26150039839348020683768343358655822180; Max-Age=15552000; Expires=Sun, 04 Jun 2023 04:10:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: cGCIRPuYR2s=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y47AyQAAAJooYwN-
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y47AyQAAAJooYwN-
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y47AyQAAAJooYwN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://c1481833.ferozo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0cfa310b8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: QwblFeoGTFU=
Content-Length: 59
Connection: keep-alive
testdata.coremetrics.com/cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&cvdone=p
200 OK 43 B URL HTTP/1.1 testdata.coremetrics.com/cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&cvdone=p
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /cm?ci=99999999&st=1670299844993&vn1=4.18.138&ec=utf-8&vn2=e4.0&pi=%2Fimg%2Findex_files%2Fgalicia%2F&ul=http%3A%2F%2Fc1481833.ferozo.com%2Fimg%2Findex_files%2Fgalicia%2F&tid=6&rnd=1670303725682&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&cvdone=p HTTP/1.1
Host: testdata.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://c1481833.ferozo.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 04:10:49 GMT
Server: Apache
Vary: Host
Expires: Mon, 05 Dec 2022 04:10:49 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, pre-check=0, post-check=0, private
Pragma: no-cache
Content-Length: 43
P3P: CP="NON DSP COR CUR ADMo DEVo PSAo PSDo OUR IND ONL UNI PUR COM NAV INT DEM STA"
Connection: close
Content-Type: image/gif
sifo.bancogalicia.com.ar/requestserver/script/v1/miv3b2/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 145 kB URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/script/v1/miv3b2/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (938)
Size 145 kB (144763 bytes)
Hash 56c7d6dccbdf5c47ae3e814a9d06a377
0e6af155d06dbb3f1fcd44cae5ad84fd49a9a8e7
fd1aa293970e3a1279f7699baf25b8915702008df0907a3959bbc1679fb987a6
GET /requestserver/script/v1/miv3b2/login.js?clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 06 Dec 2022 04:10:49 GMT
Content-Type: application/javascript
Content-Length: 144763
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
ocsp.digicert.com/
200 OK 471 B IP
Hash c324023e802dee4c6dbfa93520d5e72b
0bf5cb7e59f9cf925b137d8534344b96f2cd7165
8122bbea03e922774e3dfdc5263467c1d94a0c07392ff7468137c610a10db46c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=144493
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:49 GMT
Etag: "638e5236-1d7"
Expires: Wed, 07 Dec 2022 20:19:02 GMT
Last-Modified: Mon, 05 Dec 2022 20:19:02 GMT
Server: nginx
Content-Length: 471
sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 0 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://c1481833.ferozo.com/
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 06 Dec 2022 04:10:49 GMT
Content-Length: 0
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: http://c1481833.ferozo.com
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
ocsp.digicert.com/
200 OK 471 B IP
Hash c324023e802dee4c6dbfa93520d5e72b
0bf5cb7e59f9cf925b137d8534344b96f2cd7165
8122bbea03e922774e3dfdc5263467c1d94a0c07392ff7468137c610a10db46c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 04:10:49 GMT
Server: ECS (amb/6BA6)
Content-Length: 471
sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 115 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f7801598724b70a4b7488226b007d77a
41a9a4aa459c9b49ff1dba699f14befb9e164fd9
84b3a7691d6ee61198fa07bde9b087236aeb470a2e5ffd52cdcf2ccabcde56cb
POST /requestserver/rest/v1/pageFeatures?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 25261
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 06 Dec 2022 04:10:50 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: http://c1481833.ferozo.com
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
set-cookie: herok=2886860804N9F03o0jw0dQRp9dkFVXJRcCUbZDzU; Expires=Tue, 06-Dec-2022 04:40:49 GMT; SameSite=None; Secure
kirby=2886860804N9F03o0jw0dQRp9dkFVXJRcCUbZDzU; SameSite=None; Secure
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
www.galicia.ar/content/dam/galicia/banco-galicia/personas/canales/onb/ONBGallery/ilustraciones/App-2.jpg
200 OK 232 kB URL HTTP/2 www.galicia.ar/content/dam/galicia/banco-galicia/personas/canales/onb/ONBGallery/ilustraciones/App-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Macintosh), datetime=2022:08:18 14:50:23], progressive, precision 8, 1000x1309, components 3\012- data
Size 232 kB (231967 bytes)
Hash e5c836a4a0a86a8f73f3483df55b8cb4
22f84e668e0150a6b5dde9ce532e97a640bb589d
5f35283bd1018c2a477ae7ac1818f05bcac581b2910d3a104984602f959f4df9
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /content/dam/galicia/banco-galicia/personas/canales/onb/ONBGallery/ilustraciones/App-2.jpg HTTP/1.1
Host: www.galicia.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Mon, 29 Aug 2022 13:47:04 GMT
etag: "0x8DA89C4F4D104C7"
content-disposition: attachment; filename="App-2.jpg"; filename*=UTF-8''App-2.jpg
access-control-allow-origin: *
x-content-type-options: nosniff
cache-control: max-age=7200,s-maxage=86400,stale-while-revalidate=43200,stale-if-error=43200
accept-ranges: bytes
date: Tue, 06 Dec 2022 04:10:49 GMT
age: 73760
strict-transport-security: max-age=31557600
x-served-by: cache-eze2230027-EZE
x-cache: HIT
x-timer: S1670299849.342856,VS0,VS0,VE1
content-length: 231967
X-Firefox-Spdy: h2
onlinebanking.bancogalicia.com.ar/images/assets/logo_ios_152x152.png
200 OK 3.7 kB URL HTTP/1.1 onlinebanking.bancogalicia.com.ar/images/assets/logo_ios_152x152.png
IP
ASN #13474 Banco de Galicia y Buenos Aires
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash 44833eb3871f5915ed3b03557937c593
6a2c0daa8577d261dc4f3fa8864a0bd00f3262e3
516214aaaf58a361362c9abf9818810f7e34358ed54aacb3c8450128754f900a
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /images/assets/logo_ios_152x152.png HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 03 Oct 2022 17:29:00 GMT
Accept-Ranges: bytes
ETag: "20f919a04dd7d81:0"
Date: Tue, 06 Dec 2022 04:10:50 GMT
Content-Length: 3728
onlinebanking.bancogalicia.com.ar/Images/favicon.ico
200 OK 1.6 kB URL HTTP/1.1 onlinebanking.bancogalicia.com.ar/Images/favicon.ico
IP
ASN #13474 Banco de Galicia y Buenos Aires
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b700b544f2fa87e37e6b728fef00fcb0
c0735fa743392c2f3032c22d241854b88832cdb7
f20a33fd40173f122bec15a105374059fb3ec612d51146485ed84ef0001f2f03
Analyzer Verdict Alert urlquery phishing Phishing - Galicia
GET /Images/favicon.ico HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Mon, 03 Oct 2022 17:28:57 GMT
Accept-Ranges: bytes
ETag: "8051689e4dd7d81:0"
Date: Tue, 06 Dec 2022 04:10:50 GMT
Content-Length: 1559
sifo.bancogalicia.com.ar/requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
200 0 B URL HTTP/1.1 sifo.bancogalicia.com.ar/requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /requestserver/rest/v1/screenshot?sessionId=x&clientId=4f610b72-bc0d-4cb6-9bca-9142006dfa61 HTTP/1.1
Host: sifo.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------13408304571943765246739736697
Content-Length: 308080
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Cookie: herok=2886860804N9F03o0jw0dQRp9dkFVXJRcCUbZDzU; kirby=2886860804N9F03o0jw0dQRp9dkFVXJRcCUbZDzU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Date: Tue, 06 Dec 2022 04:10:50 GMT
Content-Length: 0
Connection: keep-alive
access-control-allow-credentials: true
access-control-allow-origin: http://c1481833.ferozo.com
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 3600
access-control-allow-headers: x-requested-with, content-type
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
content-security-policy: script-src 'self'
permissions-policy: fullscreen=();microphone=();camera=();speaker=();
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
log-ad1a29c5.us.v2.we-stats.com/api/v1/sendLogs?cid=gamora&cdsnum=1670299848389-sjn0000494-8a58dc67-4fc3-4aef-af28-4cca274533dd&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51
204 No Content 0 B URL HTTP/2 log-ad1a29c5.us.v2.we-stats.com/api/v1/sendLogs?cid=gamora&cdsnum=1670299848389-sjn0000494-8a58dc67-4fc3-4aef-af28-4cca274533dd&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/sendLogs?cid=gamora&cdsnum=1670299848389-sjn0000494-8a58dc67-4fc3-4aef-af28-4cca274533dd&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51 HTTP/1.1
Host: log-ad1a29c5.us.v2.we-stats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1256
Origin: http://c1481833.ferozo.com
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 06 Dec 2022 04:10:51 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-584153.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-584153.js?sv=7
IP
GET /c/hotjar-584153.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://c1481833.ferozo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Tue, 06 Dec 2022 04:10:48 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/cec039887315e5b4bd6c96c9b84bc308
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RjcW6ptwzh-ZrkcbQhwOIixBtR1hmaNLUuAhZlbpOWrGVgv--COTew==
X-Firefox-Spdy: h2
200.58.112.174
54.230.245.110
93.184.220.29
3.248.100.224
2.18.172.233
0.0.0.0