Report - 90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html

Report Overview

Visited public
2023-08-22 10:45:15
Tags
URL
90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Finishing URL
90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
IP / ASN
35.186.245.55
#15169 GOOGLE
Title
Online Home

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co	unknown	2013-05-11	2023-08-21 20:45:15	2023-08-22 05:35:13	1.0 kB	75 kB	35.186.245.55
onlinebanking.bancogalicia.com.ar	838359	1996-01-01	2017-11-08 14:18:56	2023-08-21 13:00:42	3.1 kB	254 kB	161.190.1.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-08-21	medium	90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html	Banco Galicia
2023-08-21	medium	90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/	Banco Galicia

PhishTank

Scan Date	Severity	Indicator	Alert
2023-08-21	medium	90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html

35.186.245.55

200 OK

4.6 kB

URL User Request GET HTTP/2
90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
IP
35.186.245.55:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectid.repl.co
FingerprintCA:E0:D4:49:AC:1B:26:D7:05:11:6C:73:DD:9E:8A:FF:8C:AF:67:26
ValidityMon, 21 Aug 2023 17:33:42 GMT - Sun, 19 Nov 2023 17:33:41 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4581 bytes)
Hash
387631c01481b834299196183abb4e1a
1c29c9b9901be51cc794c8669ea0f84dade99379
595929348df1390334ed3d13aa87937b0be92e2bc0a63a116488b1d5f99905b8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco Galicia
PhishTank	phishing	Other

HTTP Headers

GET /ssss/tok.html HTTP/1.1
Host: 90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Tue, 22 Aug 2023 10:44:58 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7714122; includeSubDomains
content-length: 4581
X-Firefox-Spdy: h2

90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/toktual.png

35.186.245.55

200 OK

69 kB

URL GET HTTP/2
90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/toktual.png
IP
35.186.245.55:443
ASN
#15169 GOOGLE

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerLet's Encrypt
Subjectid.repl.co
FingerprintCA:E0:D4:49:AC:1B:26:D7:05:11:6C:73:DD:9E:8A:FF:8C:AF:67:26
ValidityMon, 21 Aug 2023 17:33:42 GMT - Sun, 19 Nov 2023 17:33:41 GMT

File type
PNG image data, 540 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
69 kB (69422 bytes)
Hash
721847b6ec8353a349082a3d1209b0cb
6de06696a0880613a31ddf37bfd8d2b70a5276d3
ef111b89a293fa79190ce61a295bca2c11535ece34909babb12c366cb267590d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco Galicia

HTTP Headers

GET /ssss/toktual.png HTTP/1.1
Host: 90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
date: Tue, 22 Aug 2023 10:44:59 GMT
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=7714121; includeSubDomains
content-length: 69422
X-Firefox-Spdy: h2

onlinebanking.bancogalicia.com.ar/Content/Keyboard/keyboard.css?v=638144005969550000

161.190.1.97

200 OK

492 B

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/Content/Keyboard/keyboard.css?v=638144005969550000
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
ASCII text
Size
492 B (492 bytes)
Hash
cde47bbdcc48b7a1883bfa6ff9461e1b
df0ffcc2e83ba3da25ffdb9e4dfe70165e1f34a8
612a237e8ee113c28afb5b58bce39eed244dc31b6d2127b45da334edca204b85

HTTP Headers

GET /Content/Keyboard/keyboard.css?v=638144005969550000 HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Tue, 14 Mar 2023 17:23:16 GMT
Accept-Ranges: bytes
ETag: "b05232aa9956d91:0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Date: Tue, 22 Aug 2023 10:45:00 GMT
Content-Length: 492

onlinebanking.bancogalicia.com.ar/Content/bootstrap.min.css?v=638144005967340000

161.190.1.97

200 OK

20 kB

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/Content/bootstrap.min.css?v=638144005967340000
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65371)
Size
20 kB (20009 bytes)
Hash
65d518a9dc19eee2880f149ad8696734
473bab8d212a1f5f374dd5fcf66c9882ea0625d2
38c2ceafd2e0319b0249ad97ab59932dd54971afd9422bb5bbff40ab7069d763

HTTP Headers

GET /Content/bootstrap.min.css?v=638144005967340000 HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Tue, 14 Mar 2023 17:23:16 GMT
Accept-Ranges: bytes
ETag: "09aa0a99956d91:0"
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Date: Tue, 22 Aug 2023 10:45:00 GMT
Content-Length: 20009

onlinebanking.bancogalicia.com.ar/Content/default.min.css?v=638144006175890000

161.190.1.97

200 OK

139 kB

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/Content/default.min.css?v=638144006175890000
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
139 kB (138827 bytes)
Hash
8470f4212abca4c45dc81838e6e233bb
a5275aae00d3b1b522482e41e7df2bbbecfe1a53
61dd9856f81d75f7a4cc058bd94c2db3134747fcb6a72bb9ba8f49a8e1c9fe84

HTTP Headers

GET /Content/default.min.css?v=638144006175890000 HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Tue, 14 Mar 2023 17:23:37 GMT
Accept-Ranges: bytes
ETag: "80f224b69956d91:0"
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Date: Tue, 22 Aug 2023 10:45:00 GMT
Content-Length: 138827

onlinebanking.bancogalicia.com.ar/Images/favicon.ico

161.190.1.97

200 OK

1.6 kB

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/Images/favicon.ico
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.6 kB (1559 bytes)
Hash
b700b544f2fa87e37e6b728fef00fcb0
c0735fa743392c2f3032c22d241854b88832cdb7
f20a33fd40173f122bec15a105374059fb3ec612d51146485ed84ef0001f2f03

HTTP Headers

GET /Images/favicon.ico HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Tue, 14 Mar 2023 17:23:16 GMT
Accept-Ranges: bytes
ETag: "f0a215aa9956d91:0"
Date: Tue, 22 Aug 2023 10:45:01 GMT
Content-Length: 1559

onlinebanking.bancogalicia.com.ar/images/default/logo.svg

161.190.1.97

200 OK

1.8 kB

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/images/default/logo.svg
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.8 kB (1801 bytes)
Hash
8a2cc43860537affd5c0a21c0f111f32
ccf94df7487d8132a3c5ce7657810d52ce7fbd8c
b4ff0e55e735bcecbe65b3d851306ed458d3ef865d108b74dbc107ead609a17a

HTTP Headers

GET /images/default/logo.svg HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onlinebanking.bancogalicia.com.ar/Content/default.min.css?v=638144006175890000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Encoding: gzip
Last-Modified: Tue, 14 Mar 2023 17:23:17 GMT
Accept-Ranges: bytes
ETag: "803039aa9956d91:0"
Vary: Accept-Encoding
Date: Tue, 22 Aug 2023 10:45:01 GMT
Content-Length: 1801

onlinebanking.bancogalicia.com.ar/Content/fonts/Inter-Regular.woff2

161.190.1.97

200 OK

89 kB

URL GET HTTP/1.1
onlinebanking.bancogalicia.com.ar/Content/fonts/Inter-Regular.woff2
IP
161.190.1.97:443
ASN
#13474 Banco de Galicia y Buenos Aires

Requested by
https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co/ssss/tok.html
Certificate
IssuerDigiCert Inc
Subjectonlinebanking.bancogalicia.com.ar
Fingerprint62:CD:BD:70:6B:F1:97:52:5A:6A:AF:08:AC:46:18:6B:A4:90:B7:1E
ValidityTue, 27 Sep 2022 00:00:00 GMT - Wed, 27 Sep 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 89212, version 1.0\012- data
Size
89 kB (89212 bytes)
Hash
bffaed793493dc46bf0789e2275909ac
21178040c070176c06653b76d42b1e19810c2df0
77ca56870309a85759fb7116aef2119a26e358145e808868543ca1fe16c27720

HTTP Headers

GET /Content/fonts/Inter-Regular.woff2 HTTP/1.1
Host: onlinebanking.bancogalicia.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://90ef4f0f-7961-41d3-ba33-f18cc88e3e39.id.repl.co
DNT: 1
Connection: keep-alive
Referer: https://onlinebanking.bancogalicia.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Last-Modified: Tue, 14 Mar 2023 17:23:16 GMT
Accept-Ranges: bytes
ETag: "608f31aa9956d91:0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Date: Tue, 22 Aug 2023 10:45:02 GMT
Content-Length: 89212

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP