tracking-protection.cdn.mozilla.net/ads-track-digest256/1684337778
34.120.158.37 56 kB URL tracking-protection.cdn.mozilla.net/ads-track-digest256/1684337778
IP 34.120.158.37:0
Hash e82f812913b6a06c608d7bb688e184b4
ea5db373525ee7dfa0abaf0befb2dae54e62b699
46fb1d72ca8047216ad4c5349f791a385049e1025042a3fbca56a7bf94ff2e89
GET /ads-track-digest256/1684337778 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: YXcxoirhrr3s6iDAjmZEhHFrhJkagwmkEZZA/SP4J/0CkbUS11jzPHipTNswX1CsVzepO6FhfGg=
x-amz-request-id: 85NJ5Q4S6D95JSEP
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 56534
via: 1.1 google
date: Fri, 02 Jun 2023 15:37:09 GMT
age: 13990
last-modified: Wed, 17 May 2023 15:36:30 GMT
etag: "e82f812913b6a06c608d7bb688e184b4"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/analytics-track-digest256/1683905755
34.120.158.37 10 kB URL tracking-protection.cdn.mozilla.net/analytics-track-digest256/1683905755
IP 34.120.158.37:0
Hash feffee93ee53bd6b02687bb9d9a11425
f9fab28225d6eb2ed2e72ce675d5d5b624383658
3b09c3bc75d40a2dc370d7a9e88433d74de203f31056900b995b497950f2d672
GET /analytics-track-digest256/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: Q9DKofJBzEjh7MlujG7EmIdN0IpLODqf7q11rEiCaJV81FbRkg4mhslvLhlozHO59/n6XlFcOI8=
x-amz-request-id: 94AMGK124NPF2SS6
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 10486
via: 1.1 google
date: Fri, 02 Jun 2023 15:36:48 GMT
age: 14011
last-modified: Fri, 12 May 2023 15:36:10 GMT
etag: "feffee93ee53bd6b02687bb9d9a11425"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/content-track-digest256/1683905755
34.120.158.37 15 kB URL tracking-protection.cdn.mozilla.net/content-track-digest256/1683905755
IP 34.120.158.37:0
Hash adff9f8518019ddb5b72e09fa471bd56
2a5cf28dcda107605da2bb4f6e56a07e514a927f
900f414ea63bb7f4e5a33041d77112c309aa8dfebd93681895c596d948ed12bf
GET /content-track-digest256/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: z11DPyCtE7Tv7VC8Tu3aDZUOGQqLjxpoSVMJyOOiSkUj750UYvsx7R9+V0n3rE1vnoI5MiHKpNA=
x-amz-request-id: DQPK2YPTA1EB9S09
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 15350
via: 1.1 google
date: Fri, 02 Jun 2023 15:36:56 GMT
age: 14003
last-modified: Fri, 12 May 2023 15:36:06 GMT
etag: "adff9f8518019ddb5b72e09fa471bd56"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/1683905755
34.120.158.37 1.5 MB URL tracking-protection.cdn.mozilla.net/google-trackwhite-digest256/1683905755
IP 34.120.158.37:0
Size 1.5 MB (1476920 bytes)
Hash 501d3f65be5457b0986a2f0b880e88f2
0df631bbe10a12e255c8d323fed084f51ffb842d
e3acbced9ab46ff7a41311445b2bd1f6f70f8716d35131670528417d2c9a6627
GET /google-trackwhite-digest256/1683905755 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: smOaKnE5UucxcPMiWjMP4a6y3p0fJqMghHfuGCkcIfuqJcoWiAQADpRnLbM905A0mtZEL1GW6J4=
x-amz-request-id: 5E86ERTFM6RTXSPF
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Fri, 02 Jun 2023 15:37:00 GMT
age: 13999
last-modified: Fri, 12 May 2023 15:36:17 GMT
etag: "501d3f65be5457b0986a2f0b880e88f2"
content-type: application/octet-stream
content-length: 1476920
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/1684337778
34.120.158.37 346 kB URL tracking-protection.cdn.mozilla.net/mozstd-trackwhite-digest256/1684337778
IP 34.120.158.37:0
Size 346 kB (345943 bytes)
Hash dc048d310df250632824a0ef784c0503
349ed5134df1bb49ba48bab8498c932655795279
a217142987da561fafd04a5f77dcab5860687e0089002eec43cd8bd619b9870a
GET /mozstd-trackwhite-digest256/1684337778 HTTP/1.1
Host: tracking-protection.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: gZjFWDXDajzpucPe3dwJGmLbno4bkyPSzPDvtCvlFTgcL3FXmU9DJCYWhClAaIawjY9Jj0VWRMQ=
x-amz-request-id: P36M1HKERQ721DCV
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
content-length: 345943
via: 1.1 google
date: Fri, 02 Jun 2023 15:37:10 GMT
age: 13989
last-modified: Wed, 17 May 2023 15:36:35 GMT
etag: "dc048d310df250632824a0ef784c0503"
content-type: application/octet-stream
cache-control: public,max-age=86400
alt-svc: clear
X-Firefox-Spdy: h2
santafe.confingn.repl.co/
34.149.204.188429 Too Many Requests 18 kB URL User Request GET HTTP/2 santafe.confingn.repl.co/
IP 34.149.204.188:443
Certificate IssuerLet's Encrypt
Subjectconfingn.repl.co
Fingerprint63:24:9C:7A:4D:BC:52:0E:BE:6B:E9:11:82:EC:F8:65:91:5F:1C:77
ValiditySat, 13 May 2023 18:15:14 GMT - Fri, 11 Aug 2023 18:15:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (871)
Hash e8db6037285a2c74a9bfdc014349ed74
61b0c6977d53b2432f67b022048c14ae8d9bbbf9
0faf6e8ee2b6b6b18a154586809f687e165ebe3c56f3b496b7d5e49f8e7ab6e6
Analyzer Verdict Alert openphish Banco Santa Fe
GET / HTTP/1.1
Host: santafe.confingn.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 429 Too Many Requests
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6043488; includeSubDomains
content-type: text/html; charset=utf-8
date: Fri, 02 Jun 2023 19:30:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 59c3867d9f5fd9389049d65e30b3140f
733ba18dbdb9e1ec222f89af50428f64eadea277
022d0866c2f9d769d33aef591161014da7977d261c62fda2493a58a600daa8ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 19:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
santafe.confingn.repl.co/
34.149.204.188429 Too Many Requests 12 kB URL User Request GET HTTP/2 santafe.confingn.repl.co/
IP 34.149.204.188:443
Certificate IssuerLet's Encrypt
Subjectconfingn.repl.co
Fingerprint63:24:9C:7A:4D:BC:52:0E:BE:6B:E9:11:82:EC:F8:65:91:5F:1C:77
ValiditySat, 13 May 2023 18:15:14 GMT - Fri, 11 Aug 2023 18:15:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (869)
Hash eec08c3e4e8cce5de9801074b68590af
f01c1b9bd04cf9b7feeb221ad71987a76fc34671
bbe527da1de9499e5de22bf87f038085526faabb3fa1cfb7ac9479ea58713085
Analyzer Verdict Alert openphish Banco Santa Fe
GET / HTTP/1.1
Host: santafe.confingn.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6043494; includeSubDomains
content-type: text/html; charset=utf-8
date: Fri, 02 Jun 2023 19:30:23 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 59c3867d9f5fd9389049d65e30b3140f
733ba18dbdb9e1ec222f89af50428f64eadea277
022d0866c2f9d769d33aef591161014da7977d261c62fda2493a58a600daa8ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 19:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a94a6bf69a5bda20a5a497cff9a93636
fa3de38b0755fc024d6d35dfd833ac95eb79a5f3
64a989eaabc52262e244b627bbc4efd123a8079b8d2499f2f7cf80fa914c801e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 19:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2
216.58.207.227200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2
IP 216.58.207.227:443
Requested by https://santafe.confingn.repl.co/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 19156, version 1.0\012- data
Hash 0ceb759015a6df090ad355231fdb39f1
b947749baab5bfa0bee35d31e5a5050d4beefe9b
db71f8a28ad8501544fb4e7668e3c6d0b731760b6f20de3525ebaeba597f1922
GET /s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://santafe.confingn.repl.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 07:53:54 GMT
expires: Sat, 01 Jun 2024 07:53:54 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 16:04:22 GMT
content-type: font/woff2
age: 41790
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a94a6bf69a5bda20a5a497cff9a93636
fa3de38b0755fc024d6d35dfd833ac95eb79a5f3
64a989eaabc52262e244b627bbc4efd123a8079b8d2499f2f7cf80fa914c801e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 19:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=IBM+Plex+Sans
142.250.74.106200 OK 2.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=IBM+Plex+Sans
IP 142.250.74.106:443
Requested by https://santafe.confingn.repl.co/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2051), with no line terminators
Hash c2b74c827e97ad79abe7423b8b9c13ce
94bb92a2e9b055b3109337effd5ecb57da207e55
dcf753147dc7afe7ebffb082e7c205081791942819f4b8bfa0732fd70ddbd5df
GET /css?family=IBM+Plex+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://santafe.confingn.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Jun 2023 19:30:24 GMT
date: Fri, 02 Jun 2023 19:30:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
santafe.confingn.repl.co/favicon.ico
34.149.204.188429 Too Many Requests 18 kB URL GET HTTP/2 santafe.confingn.repl.co/favicon.ico
IP 34.149.204.188:443
Requested by https://santafe.confingn.repl.co/
Certificate IssuerLet's Encrypt
Subjectconfingn.repl.co
Fingerprint63:24:9C:7A:4D:BC:52:0E:BE:6B:E9:11:82:EC:F8:65:91:5F:1C:77
ValiditySat, 13 May 2023 18:15:14 GMT - Fri, 11 Aug 2023 18:15:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (871)
Hash c8d99fbfa057d092fdac5ee40e76777b
5f44aa618db46acb6910bfdd56f42595dba3473c
4b38c5790b96ecaeb627fa8cb22bcc1ee597b11c423c56f785915be540616197
Analyzer Verdict Alert openphish Banco Santa Fe
GET /favicon.ico HTTP/1.1
Host: santafe.confingn.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://santafe.confingn.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=6043488; includeSubDomains
content-type: text/html; charset=utf-8
date: Fri, 02 Jun 2023 19:30:24 GMT
X-Firefox-Spdy: h2