zerossl.ocsp.sectigo.com/
172.64.149.23 728 B URL zerossl.ocsp.sectigo.com/
IP 172.64.149.23:0
Hash c92240bc5375e353d1da87b7d7571554
bbbb28e4f535c3f9909353445c1ab9e2130dc396
89c63bd70624e130f314031719ce3eba8bb4d8560a33419e3964c41d8a1d2685
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 Nov 2023 14:40:41 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 28 Nov 2023 20:54:09 GMT
Expires: Tue, 05 Dec 2023 20:54:08 GMT
Etag: "bbbb28e4f535c3f9909353445c1ab9e2130dc396"
Cache-Control: max-age=541806,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82db9b7148195697-OSL
registraduriagovdomi-shop.preview-domain.com/
84.32.84.36200 OK 5.7 kB URL User Request GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/
IP 84.32.84.36:443
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1073), with CRLF line terminators
Hash 9d621ef1120828df46565325665af91c
44cea9107a6e1b5bfb67a6b4223c0d9b0d361053
a9c283302013772f1449237af78e06c157271933298b168767988236d312fb32
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET / HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:41 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.22
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/seguridad.jpg
84.32.84.36200 OK 1.9 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/seguridad.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 1aa9d62d948208093b507e8e1439b309
72f701f1204320b47d9966d5d0ed496a733adb80
1800e5e993450b4f547840ccb7abf5cd1f285f6cf9784b3ec23675528a49ff8c
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/seguridad.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 1935
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Tue, 14 Jun 2022 23:56:48 GMT
etag: "78f-62a92040-f4e3e5cf7ef17deb;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/error.jpg
84.32.84.36200 OK 5.4 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/error.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 195x194, components 3\012- data
Hash 845eeed3b61d4c19ed0059c42fa7fc2e
ace747921c0b92d8451a1562759c867296c31b44
f68c633109e951014c6c401f878be7196c8894f6723215afb18388dbbbb83f1d
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/error.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 5363
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Wed, 15 Jun 2022 10:46:18 GMT
etag: "14f3-62a9b87a-de4b95ffe6fd9ab0;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/demo.jpg
84.32.84.36200 OK 1.5 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/demo.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 992039d1b794268d688a19b3563b7cd2
9116dbfe0fe620a6351952c1053017501537002f
61541605fc80557ad8cbc03b7d7ea64e94732198e536d4618dea0cb70191eb48
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/demo.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 1465
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Wed, 15 Jun 2022 00:00:58 GMT
etag: "5b9-62a9213a-b4b63389531a4a75;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/reglamento.jpg
84.32.84.36200 OK 1.8 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/reglamento.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash be3af886cffea048856b7fc77eaeebfc
96c0ec1895b5544070fd9c3ff371812ea04c7932
4d31c93eab87267a6e5e827fedd488a02c824a79ded4f00ef19f7431eaedab12
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/reglamento.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 1764
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Tue, 14 Jun 2022 23:56:50 GMT
etag: "6e4-62a92042-ee35978fb9a590;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/politica.jpg
84.32.84.36200 OK 2.6 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/politica.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 7bb6c2ef23b43c8b8723d9e68ddf2fec
351b75536ef2c3244b7ba1eec7fe13215990a177
7b4d681b13b2beeab7a0dbd807eac72b762dec8e3bb18410776270a51860ac86
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/politica.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 2615
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Tue, 14 Jun 2022 23:56:52 GMT
etag: "a37-62a92044-e30e59191bf1eab5;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/inicio.jpg
84.32.84.36200 OK 48 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/inicio.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 627x327, components 3\012- data
Hash 085532800ace541124cb3472d27a2365
153ac0b32e31c472e021e450b6e48f4564a4c40f
35500fe4c97323624f089389243374c56e666e25478685a849c2456461a6163d
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/inicio.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 47804
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Mon, 13 Jun 2022 09:22:10 GMT
etag: "babc-62a701c2-607ad96080b93cc;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/css/style.css
84.32.84.36200 OK 2.8 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/css/style.css
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 8fd1312386e215d7321a8eeb7ae7ff20
e993b2d6b33a4131671ca571ce6ac4a09b9ace71
74db6f5045e4f0edbf88e29712481654aa8112c37a5029d5c1f78845df492ac2
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /css/style.css HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Fri, 11 Aug 2023 09:38:36 GMT
etag: W/"18b9-64d6019c-df02418ed0939ebb;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/logo.png
84.32.84.36200 OK 9.5 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/logo.png
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type PNG image data, 521 x 520, 8-bit/color RGBA, non-interlaced\012- data
Hash 2903c67701750d246b77ee1c1c9188f1
028e6e88d6563e81eb77807c38f401cf5e7f2be0
c2fd3f9e79070fdbcb7ed3270a428a6ecd22ae089ab6e573eb4dfe91079c41fb
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/logo.png HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:44 GMT
content-type: image/png
content-length: 9489
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:44 GMT
last-modified: Thu, 06 Jan 2022 09:33:06 GMT
etag: "2511-61d6b752-f217679d1fc52778;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/js/jquery-3.6.0.min.js
84.32.84.36200 OK 142 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/js/jquery-3.6.0.min.js
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Size 142 kB (142250 bytes)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /js/jquery-3.6.0.min.js HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: application/x-javascript
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Wed, 11 Aug 2021 05:21:10 GMT
etag: W/"15d9d-61135e46-5ce4b1d85cca0adb;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/css/stylesheet.css
84.32.84.36200 OK 218 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/css/stylesheet.css
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (360)
Size 218 kB (217689 bytes)
Hash a310982fb888be050fb3ab09d40d7ffc
b4a86966fec0a29c9bae72c1279a762cc009bf21
f27f79e97e6af6f6003291117a51ded4ac0271248d26e5acf840f666d12d38b2
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /css/stylesheet.css HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Mon, 13 Jun 2022 10:37:10 GMT
etag: W/"b82-62a71356-fa9f25baced4e298;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
kit.fontawesome.com/45b9078c9f.js
104.18.40.68200 OK 12 kB URL GET HTTP/2 kit.fontawesome.com/45b9078c9f.js
IP 104.18.40.68:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (11461)
Hash 8679b34d46e8146d637abc0ce2b3848f
7a11793c2a613c18aa3269de522240eb885f45c0
79b9e86eab876f114e565ee459266a84944841f1fa6a6f364b5d451cd030def5
GET /45b9078c9f.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://registraduriagovdomi-shop.preview-domain.com
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F5weH_jdHy4Oxu0t806B
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 82db9b766a36712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/info.jpg
84.32.84.36200 OK 3.4 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/info.jpg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 62x61, components 3\012- data
Hash 72f07f88a708281bb165235fb88649ee
d2e7284036b30a170dc68c2ad476d664234ed66c
13df691e5ad1109013261983ff6272aa37353f3b28525a9e8b0b29355a1ebec4
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/info.jpg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/jpeg
content-length: 3438
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Tue, 14 Jun 2022 16:14:56 GMT
etag: "d6e-62a8b400-1f62e69d39674362;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/js/jquery.jclock-min.js
84.32.84.36404 Not Found 2.5 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/js/jquery.jclock-min.js
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2574), with no line terminators
Hash 8db2febb25004d4b1814ede56abdf103
11e5a4b18676eba27b8aaf7aff059be010682b13
9d1ed5e2ecc952bc54eab3d37733bcc85ef9f501c352813a052bcc6104cf16f1
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /js/jquery.jclock-min.js HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: hcdn
date: Wed, 29 Nov 2023 14:40:43 GMT
content-type: text/html
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/fonts/opensans/CIBFontSans-Light.ttf
84.32.84.36200 OK 111 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/fonts/opensans/CIBFontSans-Light.ttf
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 33 names, Macintosh, Copyright (c) 2019 by Vasava Studio. All rights reserved.\011CIBFont SansLight1.300;UKWN;CIBFont\012- data
Size 111 kB (110612 bytes)
Hash 69096387df83ff65381f8ee25006b0aa
89689ed7f7547a3815d9fa2d0a2c11513480086e
decf1c3cb09b3e38d867e0d5cf648220584404c9cf8d18a6c51bdfa2af5047cc
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /fonts/opensans/CIBFontSans-Light.ttf HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:44 GMT
content-type: application/x-font-ttf
content-length: 110612
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:44 GMT
last-modified: Thu, 24 Jun 2021 08:38:50 GMT
etag: "1b014-60d4449a-5ef03a224af1d93c;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/js/functions.js
84.32.84.36200 OK 2.9 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/js/functions.js
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3105), with no line terminators
Hash 21c42c1f06d2862898040fec5a83b499
3001988a1a387e2ad37e22d045b21cf76e7505b0
b1589301efe36095373088c663f2ec2c1f19d6310c77c49c7bca08496dea9325
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /js/functions.js HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: application/x-javascript
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Fri, 11 Aug 2023 10:16:10 GMT
etag: W/"b35-64d60a6a-a713e08cebd18975;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-font-face.min.css?token=45b9078c9f
172.64.204.20200 OK 1.8 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-font-face.min.css?token=45b9078c9f
IP 172.64.204.20:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT
File type ASCII text, with very long lines (1803), with no line terminators
Hash b2c3e1c2e8f0857f13167a42dcd9837b
78c8106c6fedc602e8abb5faa5308e3ec7e519a0
947886785a773060b31ae79e0ab5a2360e50f97ca61bfbf6cbd2de6ff505b7a8
GET /releases/v6.5.0/css/free-v4-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Origin: https://registraduriagovdomi-shop.preview-domain.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 27 Nov 2023 22:00:05 GMT
etag: W/"4ce582f2043c13bf5f1ee89cde34b0f6"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 905eac6c91c9858bd0f20b56e9c842d4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 57hLqEct3frx_CyoNgYVembQISTNY1ItW2qCbzsgGbDR95Gt2XwPfw==
age: 20832
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aD1%2FW9vK2F5U%2FIFfYc9JrbDUYZx1IypNsSHAMd2M6TSjAIhPVjwsVsMJQ9Ak7e0qSnX1VdFqFBbPXtYjxGmXXUw7Pp8ygi1H7NwxzZfS7aTr6NMJ%2FJiPmXuXoUHP43wyHxShNKe2Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82db9b784e918885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.5.0/css/free.min.css?token=45b9078c9f
172.64.204.20200 OK 103 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.0/css/free.min.css?token=45b9078c9f
IP 172.64.204.20:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT
File type ASCII text, with very long lines (65321)
Size 103 kB (103058 bytes)
Hash 15a060131273cd839413202ab8c69d4e
3d193c9afff0131ec1c8344f570057a5bd5caf21
9ed67cc602971ea377015adc4326c39674f64554496c737c073321e51f124634
GET /releases/v6.5.0/css/free.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Origin: https://registraduriagovdomi-shop.preview-domain.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 27 Nov 2023 22:00:05 GMT
etag: W/"15a060131273cd839413202ab8c69d4e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 728b6476f3e2317ec8044d22806d4f94.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 1dYwgrCtsQrFJbutTvugHCSP64xlfJLc_bXpV_73jTEeE3NyBm_h9w==
age: 20832
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUZ%2BtmuZ4Zle4BTAWGHJCcBfzDkz2fWpNdXRArUe4Tof83biIgrxDDpS9fZ3A1qpT1j6o6sEzu2r5ZExj9phPsOroPp7aiRNiwiBmWpfsB5XVQxlKS6CTGPdbhpRlQECmWpY4GJ2zA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82db9b783e798885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-shims.min.css?token=45b9078c9f
172.64.204.20200 OK 28 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.0/css/free-v4-shims.min.css?token=45b9078c9f
IP 172.64.204.20:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT
File type ASCII text, with very long lines (27377)
Hash cb34a50ec950259adb897ce22de151f4
027ed0ee33281ea09de27b0aa50e56ed6cef3399
211727c7d057e6de5f5b5fa4c730ab3563500e82902431543b675df268302cd2
GET /releases/v6.5.0/css/free-v4-shims.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Origin: https://registraduriagovdomi-shop.preview-domain.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 27 Nov 2023 22:00:05 GMT
etag: W/"cb34a50ec950259adb897ce22de151f4"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7fcc9354bd594831abf31608fb6cde60.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 7HEmDT-M1-RZymiuaxinIMu9Pmq2znYBdnAlPwA42bbip0x24qUFHg==
age: 20832
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fMjkOZfbxC%2F4c6nQLcOtHonYlB4JkZtaDyrbmGTGpc5j9eYBsdLVJQKdihEtgu0paAvwA50NZyr%2B%2BxnLGJDAP%2BrQfAh98KdfblyTehVVIbjBJJjUTBAIVD59gOCHHLtXq84FvtByzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82db9b783e828885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/user.png
84.32.84.36200 OK 447 B URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/user.png
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e3457ed5ea858d1e9287ef66dcbbfe4
006c99b62e141ebbc69f6e06cab757995d3f7417
75d5b455151a3b1a0a5b100041fee37de2daa0b41d1d177deaa863177c5b5b83
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/user.png HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:44 GMT
content-type: image/png
content-length: 447
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:44 GMT
last-modified: Tue, 14 Jun 2022 06:54:50 GMT
etag: "1bf-62a830ba-4d3d7bf6e7bc094;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/fonts/opensans/OpenSans-Regular.ttf
84.32.84.36200 OK 217 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/fonts/opensans/OpenSans-Regular.ttf
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 26 names, Macintosh, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data
Size 217 kB (217276 bytes)
Hash d7d5d4588a9f50c99264bc12e4892a7c
513966e260bb7610d47b2329dba194143831893e
13c03e22a633919beb2847c58c8285fb8a735ee97097d7c48fd403f8294b05f8
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /fonts/opensans/OpenSans-Regular.ttf HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:44 GMT
content-type: application/x-font-ttf
content-length: 217276
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:44 GMT
last-modified: Thu, 24 Jun 2021 08:39:20 GMT
etag: "350bc-60d444b8-67f09f75119691ef;;;"
accept-ranges: bytes
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.5.0/css/free-v5-font-face.min.css?token=45b9078c9f
172.64.204.20200 OK 823 B URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.0/css/free-v5-font-face.min.css?token=45b9078c9f
IP 172.64.204.20:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT
File type ASCII text, with very long lines (845), with no line terminators
Hash b959572f7b9f249fd2565dfcc6786335
cc9edffc17de0d5b568e8f282001c32670976cc8
fdc4ed2b79f60b6d6e1ecbdd069e223d2331e55fafd95e3fb38b5656f2f2992f
GET /releases/v6.5.0/css/free-v5-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Origin: https://registraduriagovdomi-shop.preview-domain.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 27 Nov 2023 22:00:05 GMT
etag: W/"e536171a5fc37fee765bddb99fc0a169"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 d6030d5ab753695c0198f874d4276eb2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: lPopSxUOFOA3FZfYrHc43hD579gBpeRdOUX4JSmg3VipENqU09BwAA==
age: 20832
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=avBvIExPgiUECGmLwWx450xe7Qh9iHPlpw7VYeqTY8I%2FJhzlpU8ykASmf3T2URNOE%2FJk%2FlLhyDHUTahPPQU3CyiLPRvjkVTFirSOsQoTyCpqjZ8Ak5JqYwoIR5vUZF%2BuwOYiEyJAYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82db9b783e7f8885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/img/logo.svg
84.32.84.36200 OK 7.0 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/img/logo.svg
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7158), with no line terminators
Hash 25dd9ab906a1090c8148571c89804ff1
9bcc8fa0be2694bb947a3205d19424eba45c3993
801fb30278b9eedb6a6c1e9c87b6cb2c5d03765ed74d2e75fc931e52b998707b
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
OpenPhish phishing Bancolombia
GET /img/logo.svg HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Wed, 06 Dec 2023 14:40:42 GMT
last-modified: Mon, 13 Jun 2022 09:11:40 GMT
etag: W/"1b6c-62a6ff4c-e98f2ce50e4a0e96;;;"
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2
registraduriagovdomi-shop.preview-domain.com/js/jquery.jclock-min.js
84.32.84.36404 Not Found 2.5 kB URL GET HTTP/2 registraduriagovdomi-shop.preview-domain.com/js/jquery.jclock-min.js
IP 84.32.84.36:443
Requested by https://registraduriagovdomi-shop.preview-domain.com/
Certificate IssuerZeroSSL
Subject*.preview-domain.com
FingerprintC4:E4:D1:61:F7:AC:B4:BA:D3:17:CF:33:B0:40:BF:42:57:25:89:B3
ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2574), with no line terminators
Hash 8db2febb25004d4b1814ede56abdf103
11e5a4b18676eba27b8aaf7aff059be010682b13
9d1ed5e2ecc952bc54eab3d37733bcc85ef9f501c352813a052bcc6104cf16f1
Analyzer Verdict Alert OpenPhish phishing Bancolombia
GET /js/jquery.jclock-min.js HTTP/1.1
Host: registraduriagovdomi-shop.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://registraduriagovdomi-shop.preview-domain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: hcdn
date: Wed, 29 Nov 2023 14:40:42 GMT
content-type: text/html
vary: Accept-Encoding
platform: hostinger
x-turbo-charged-by: LiteSpeed
content-encoding: br
X-Firefox-Spdy: h2