Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    27/12/2022, 22:55 UTC

General

  • Target

    LauncherFenix-Minecraft-v7.exe

  • Size

    397KB

  • MD5

    d99bb55b57712065bc88be297c1da38c

  • SHA1

    fb6662dd31e8e5be380fbd7a33a50a45953fe1e7

  • SHA256

    122bfbb9f67e355340991deeacb167be9c12ad726b5a7c5779448dd0cc4af0cb

  • SHA512

    3eb5d57faea4c0146c2af40102deaac18235b379f5e81fe35a977b642e3edf70704c8cedd835e94f27b04c8413968f7469fccf82c1c9339066d38d3387c71b17

  • SSDEEP

    3072:puzvch1rugYc4wqYSRR756K7ItBjgXHUYCnlK:Wch1aIqYSRVM+unlK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe
    "C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2044
    • C:\Program Files\Java\jre7\bin\javaw.exe
      "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\LauncherFenix-Minecraft-v7.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1220
      • C:\Program Files\Internet Explorer\iexplore.exe
        "C:\Program Files\Internet Explorer\iexplore.exe" https://launcherfenix.com.ar/wope/register/
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1412
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1412 CREDAT:275457 /prefetch:2
          4⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:980

Network

  • flag-unknown
    DNS
    www.dropbox.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    www.dropbox.com
    IN A
    Response
    www.dropbox.com
    IN CNAME
    www-env.dropbox-dns.com
    www-env.dropbox-dns.com
    IN A
    162.125.8.18
  • flag-unknown
    DNS
    files.launcherfenix.com.ar
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    files.launcherfenix.com.ar
    IN A
    Response
    files.launcherfenix.com.ar
    IN A
    104.21.72.175
    files.launcherfenix.com.ar
    IN A
    172.67.153.84
  • flag-unknown
    DNS
    launchermeta.mojang.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    launchermeta.mojang.com
    IN A
    Response
    launchermeta.mojang.com
    IN CNAME
    launcher-meta-cdn.azureedge.net
    launcher-meta-cdn.azureedge.net
    IN CNAME
    launcher-meta-cdn.afd.azureedge.net
    launcher-meta-cdn.afd.azureedge.net
    IN CNAME
    star-azureedge-prod.trafficmanager.net
    star-azureedge-prod.trafficmanager.net
    IN CNAME
    shed.dual-low.part-0039.t-0009.fdv2-t-msedge.net
    shed.dual-low.part-0039.t-0009.fdv2-t-msedge.net
    IN CNAME
    part-0039.t-0009.fdv2-t-msedge.net
    part-0039.t-0009.fdv2-t-msedge.net
    IN A
    13.107.237.67
    part-0039.t-0009.fdv2-t-msedge.net
    IN A
    13.107.238.67
  • flag-unknown
    DNS
    profile.launcherfenix.com.ar
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    profile.launcherfenix.com.ar
    IN A
    Response
    profile.launcherfenix.com.ar
    IN A
    172.67.153.84
    profile.launcherfenix.com.ar
    IN A
    104.21.72.175
  • flag-unknown
    DNS
    iniciolauncherfx.tumblr.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    iniciolauncherfx.tumblr.com
    IN A
    Response
    iniciolauncherfx.tumblr.com
    IN A
    74.114.154.18
    iniciolauncherfx.tumblr.com
    IN A
    74.114.154.22
  • flag-unknown
    GET
    http://iniciolauncherfx.tumblr.com/
    javaw.exe
    Remote address:
    74.114.154.18:80
    Request
    GET / HTTP/1.1
    Accept-Language: en-us,en;q=0.5
    Accept-Encoding: gzip
    Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/535.14 (KHTML, like Gecko) JavaFX/2.2 Safari/535.14
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Cache-Control: no-cache
    Pragma: no-cache
    Host: iniciolauncherfx.tumblr.com
    Connection: keep-alive
    Response
    HTTP/1.1 302 Found
    Server: openresty
    Date: Tue, 27 Dec 2022 22:56:00 GMT
    Content-Type: text/html; charset=UTF-8
    Content-Length: 0
    Connection: keep-alive
    X-Rid: c37cbd95e32984991133953f707ef390
    P3p: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
    X-Frame-Options: deny
    X-Xss-Protection: 1; mode=block
    X-Content-Type-Options: nosniff
    Strict-Transport-Security: max-age=15552001
    Location: https://iniciolauncherfx.tumblr.com/
    X-UA-Compatible: IE=Edge,chrome=1
    X-UA-Device: desktop
    Vary: X-UA-Device, Accept
  • flag-unknown
    DNS
    assets.tumblr.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    assets.tumblr.com
    IN A
    Response
    assets.tumblr.com
    IN A
    192.0.77.40
  • flag-unknown
    DNS
    px.srvcs.tumblr.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    px.srvcs.tumblr.com
    IN A
    Response
    px.srvcs.tumblr.com
    IN A
    192.0.77.40
  • flag-unknown
    DNS
    static.tumblr.com
    javaw.exe
    Remote address:
    8.8.8.8:53
    Request
    static.tumblr.com
    IN A
    Response
    static.tumblr.com
    IN A
    192.0.77.40
  • flag-unknown
    DNS
    launcherfenix.com.ar
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    launcherfenix.com.ar
    IN A
    Response
    launcherfenix.com.ar
    IN A
    104.21.72.175
    launcherfenix.com.ar
    IN A
    172.67.153.84
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/register/
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/register/ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/html; charset=UTF-8
    Transfer-Encoding: chunked
    Connection: keep-alive
    vary: Accept-Encoding
    x-powered-by: PHP/7.3.25
    x-powered-by: PleskLin
    x-frame-options: SAMEORIGIN
    expires: Wed, 11 Jan 1984 05:00:00 GMT
    Cache-Control: no-cache, must-revalidate, max-age=0
    link: <https://launcherfenix.com.ar/wope/wp-json/>; rel="https://api.w.org/"
    link: <https://launcherfenix.com.ar/wope/wp-json/wp/v2/pages/111>; rel="alternate"; type="application/json"
    link: <https://launcherfenix.com.ar/wope/?p=111>; rel=shortlink
    CF-Cache-Status: DYNAMIC
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fl5cUloFphL4M969S69K9jfeSduj3zkFtrbZF7VNMhCDJJydiqsYiIs1hl5MKfNp%2F5I5sKrermikf3RRkh5GbhsP8xwkj9cBbBrz8TvEmIlBsjyO8KdzNiHXl3QhIQwJBr0x0RlInw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a73aa8bfb97e-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Tue, 06 Apr 2021 23:50:28 GMT
    vary: Accept-Encoding
    etag: W/"606cf3c4-e33b"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 1300
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UboxraMVUbUZo0fqI1%2FKGNVqNkdfpbOPBNzOW3f3AGJS2Cuzy1RcySZfAD0Bxy%2BYUfYLWKe%2FPWDEcdXRvV7PO7YSi39RL53NFVhTct2nIffuNc4m9Y%2BtCOltCerzBZO9hLyp05%2FDbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a74208b4b97e-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/style.css?ver=5.3.23
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/style.css?ver=5.3.23 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    Cf-Polished: origSize=42091
    etag: W/"60b436d6-a46b"
    last-modified: Mon, 31 May 2021 01:07:34 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2816
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WX%2F9nfY8Vy%2FjL4v6I6tIj%2FvXzItBkvUhzjoKj6AYj6KLDN4qT1v5UQz0NnOgC1XSQYxMKCk4a5IJg6surCDnSOms92C3Aw4aC9f4mOxX8tWMMYCkyPWm%2FSj%2FqDQogqcz3s%2B4lO1y5A%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a74238edb97e-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/plugins/sassy-social-share/admin/css/sassy-social-share-svg.css?ver=3.3.20
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/plugins/sassy-social-share/admin/css/sassy-social-share-svg.css?ver=3.3.20 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    etag: W/"60a56e17-1baf8"
    last-modified: Wed, 19 May 2021 19:59:19 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 7142
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o01SRArlBaIfjkPJD%2BU8why%2FjhyZnmokd3%2FZIwT9%2B6LYw0PqIM3SZoojwNJZwH4ndRHqeMGjH%2FI0TuGvcAeQCM4XxbtCprc2Sl0AMhELpYv5h3RmPD00jsjcjJmyaa3YyZcFvEJ0dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7426916b97e-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    Cf-Polished: origSize=3329
    etag: W/"60a56e17-d01"
    last-modified: Wed, 19 May 2021 19:59:19 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: REVALIDATED
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BCDju31%2BamTG6cOk4Dsmg26dL9Q6m54je5wQCBXIjJHpTOnJUgcUaqEpaQb0aSubnBHBHTWKS4ZtY%2B4hOxLIJ40VwXjE4i0Y2135DvkXwlLqShyfj%2BMWnhcKBNF6KezPDpD3WLzqSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a74309c9b97e-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:08 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 06 Jan 2021 15:29:24 GMT
    vary: Accept-Encoding
    etag: W/"5ff5d754-3795"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: REVALIDATED
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oj75A6tCK8V7qihvZoeXB5h%2BrUoJ0sSFrZbIMGkbGZZvBe3xJNVPm8eFJvyB3uUiO%2FGvDrsxOEg1wI%2B36LV7azN4S38EJ0fzjbMrte0ji6OhgH8LoUr8FW8t4R3WdTVWEJOVWH19dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7462d06b97e-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/bg.jpg
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/images/bg.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:08 GMT
    Content-Type: image/jpeg
    Content-Length: 61931
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:32 GMT
    etag: "60a56b90-f1eb"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 7142
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dAJTOK%2BBsujtCOo2iv1ygbiLpAJdMdp%2BSYemDEbPkF923tQc%2Brf%2BERobJ7IxROMVxP%2B9O7GCx1cArbPanzN%2B7WAfCcOBLICpxEPYo%2F68XxluUVQJ1E15ACm9YqE8OkqBK6JeyStipA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a749583eb97e-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.89
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.89 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    Cf-Polished: origSize=1353
    etag: W/"60a56e17-549"
    last-modified: Wed, 19 May 2021 19:59:19 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2816
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ee3PIRRHVKgu7LozAjAVVuhZgkHL%2B8nkj73bDf7p84oNmcKjNNvkN0WBdcV0zAYXYX2XvP%2FfZ1q2079vZTpQKgzO2lO%2B%2Bw20wcvDePOYmLbcJcM51h8y18x%2F2fBlgt4RGI8c1mA%2FIg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7420d47b767-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/css/fancybox.css?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/css/fancybox.css?ver=5.7.2 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    Cf-Polished: origSize=5812
    etag: W/"60a56b8a-16b4"
    last-modified: Wed, 19 May 2021 19:48:26 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2187
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UpPMG9eRkNVSAOXlcWE6Q5NHdmCSPygeLq%2Bh9BxaTU4ywJ5gLg5rKvVwCKhLHlEyvnaVppcACMd1tZE3omAN1LW1W6FVHlA2y2aSQa%2BMsbC8QXud6xIegAqGnySHD4pIx8LUfWJjYA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7423d78b767-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.20
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.20 HTTP/1.1
    Accept: text/css, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: text/css
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    etag: W/"60a56e17-8ff4"
    last-modified: Wed, 19 May 2021 19:59:19 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2187
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eeBEOWAcc9i2ThJ%2Bm6Rjk7Ic6PFupj0on3HyInZCVbdy%2FcMPelnr7CcZwOFc9CckQXFyBA%2BAIn1p7JsKUpwt6R3d2QbtQU2ZQX7PBMVloay54XkREMdjUUxNGrB39OZZUZYijn2Neg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7426d90b767-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    Last-Modified: Tue, 20 Dec 2022 16:36:20 GMT
    ETag: W/"63a1e484-4d7"
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GHx1jIRfTpMMrho%2FaWs85tKfyhfyQgelCD8uLDeKiC%2FyI5Km8%2FxuXs0lz2AhIisxoUDiBvcSDT0KOPSmp8gNChaR2d6oi1zzSmyGc33CHpxb9mTxC0SWH2KnY6hC%2BYsjIEoQvz%2FdxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7430e11b767-AMS
    X-Frame-Options: DENY
    X-Content-Type-Options: nosniff
    Expires: Thu, 29 Dec 2022 22:57:07 GMT
    Cache-Control: max-age=172800
    Cache-Control: public
    Content-Encoding: gzip
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.fancybox.min.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/js/jquery.fancybox.min.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:40 GMT
    vary: Accept-Encoding
    etag: W/"60a56b98-4fc3"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2187
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eoljLxfeIz6zCE2prSzAh6wwJylU5rGO9gdCxuZi1z11S%2FRAr3bSVWMTCO8URq%2FYXFeRJi7hff4p5RPQIorEjaeWTfgbMrt752zl4dGiv26Wp5WAN3Z9q6rVWGD0xRprYDcW6MWdAg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7433e2db767-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/aus-pagelink.png
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/images/aus-pagelink.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/png
    Content-Length: 21830
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:31 GMT
    etag: "60a56b8f-5546"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2188
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cvtCNxliTNcuwb30MnoNuN3iAhLbi4TfAxp0xUyeTTeduZwduaKaHtrAm5yKOCXYcZJZG7gC63YbpBmC1dnhIoWIorlL9jmkxjq1J%2BYWrMYzeCDnCslKwm9aTU72pDr9D8tmFK0wKw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7437e5cb767-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/12/LauncherFenix-5.2-Web-65x65.jpg
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/uploads/2018/12/LauncherFenix-5.2-Web-65x65.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/jpeg
    Content-Length: 2682
    Connection: keep-alive
    last-modified: Thu, 20 May 2021 04:20:18 GMT
    etag: "60a5e382-a7a"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2186
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CRVP%2FG3M2zwCxpEFaku2ntLpGADRcSuwmjb1OmCQTW%2F17P%2FEhGV9vEZfvY7s0LWEf%2BCvwxTwKDySVziD44YHDaB3WvRMlWYBsC6hk61QZhfo3bJkatY8bZo07V9C%2BB%2F1ALhX5tHMzg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a743ae76b767-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/10/1.13.2-65x65.jpg
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/uploads/2018/10/1.13.2-65x65.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/jpeg
    Content-Length: 2123
    Connection: keep-alive
    last-modified: Thu, 20 May 2021 04:20:18 GMT
    etag: "60a5e382-84b"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 7142
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TOt6MgjjHf93sL49iTPeqL8Fp00ccSLcfKeACBG7gY5XlRYs1gVnYFJEoyu5b2BPBIUuusiOfJE4FLeu6aL%2F%2B1AH1HCmhQ9l%2BalA3SZWZbQ%2FwclJqLV%2BGcWmKez12DTolVN8mNi%2B9A%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a743de9cb767-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 18 Nov 2020 09:06:06 GMT
    vary: Accept-Encoding
    etag: W/"5fb4e3fe-2bd8"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 1301
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WMGvVSc5mDnLiGbsOkmpq3X0T21w2Wmj%2FkbOzGwXWxJbOdxWPPSitIDMpBHDyBMVpBQYB7wOLKvMu%2B3TL9EfLf46e%2FlHiRjZS6H9CySfwkzpzOSoa89DI34SYnQUmrXZd1W70HrVLw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a742bb9c0a71-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.mousewheel.min.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/js/jquery.mousewheel.min.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:40 GMT
    vary: Accept-Encoding
    etag: W/"60a56b98-a31"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: MISS
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=46OqFcrIzLIsnvoCSjNTGAnfnO4RaPn1nNnetWw%2BXjpBJupws4mGYh5t2c8jm7Z6a%2BkBhzmYgBry%2FdHL52ebqxTprypzI8RZ6NkwkJakpXEOu8qgh0s7mBLlxMyyYsKcwMjAb6voXA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7433c240a71-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/navigation.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/js/navigation.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    Cf-Bgj: minify
    Cf-Polished: origSize=3177
    etag: W/"60a56b99-c69"
    last-modified: Wed, 19 May 2021 19:48:41 GMT
    vary: Accept-Encoding
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 6763
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wBZDYzMRhn4c8HFBBp22vqPqiJ9%2BHC4n%2FuIbpiI36SCbHtg17QGZUeTiMg4GTaPNjChE4sIlPhGmC6EZFzVj5vT%2Fppwr64riWPIAdjyToBI8ckMoZvn92AZ1xVJ2yp8RIbONw5iPEw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a742cdbfb885-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/logo.png
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/images/logo.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/png
    Content-Length: 6260
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:34 GMT
    etag: "60a56b92-1874"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 6765
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRzwqXT8ZVdHMjnhOoyKox%2FdY0sKxAoMCnLqLJ1D8CnX3ZnRup3Dba2aad2fi894nx9QXflvJCp9Xm%2FD3vnPi5ain735P6xLSdCsETytDupPEO50hxvdFUqvv8sYCrY4qe8H01ZQqg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7433df5b885-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/header-right.png
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/images/header-right.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/png
    Content-Length: 8484
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:33 GMT
    etag: "60a56b91-2124"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 6765
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cRbwsvaOyjRcTBg6%2BaMBjsimyvuWTwe4nCXRPy7AO8ds1wG7nFo8mmBbQiok1R%2BTVz9NpO8QpFs7HdklA9Z4gPExCIhRro3xqdex1KeninLRnkkqGNgeTnmIaKWFsPXZ6sbd7VTmNg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7437e2cb885-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/08/LauncherFenix-4.8.5-Personaje-65x65.png
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/uploads/2018/08/LauncherFenix-4.8.5-Personaje-65x65.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/png
    Content-Length: 4525
    Connection: keep-alive
    last-modified: Thu, 20 May 2021 04:20:18 GMT
    etag: "60a5e382-11ad"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2817
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nfgDfseXobH7ZKCFw4jhE8CHZhR8%2BfO8sTy95nEzT4wb9Py4tNoimSN2bVry7MS8TP%2B9EYQdlj6Jk6eL3wlYOYO4AajLdaM0y2nzeO%2BR%2FF%2BVU6W5E3mTSA1I7hAfgQ%2Bj58rLl%2FJtzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a743ae41b885-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/08/1.13.1-65x65.jpg
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/uploads/2018/08/1.13.1-65x65.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: image/jpeg
    Content-Length: 1747
    Connection: keep-alive
    last-modified: Thu, 20 May 2021 04:20:18 GMT
    etag: "60a5e382-6d3"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 6710
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CdJmbht1C1tP7%2B99hJMptthcsw849eUBWSCCLZRpgHhvXBXiBXdxASr4QLfvfUVijtiD2JAP3mM8VfOs3kYysez9ipi7hV%2FZ6vQyK2zIoj68GF0sHdMxJ3IUEnYU1qZR2dsr7kZ8Hw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a743de64b885-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.easing.min.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/themes/launcher-fenix/js/jquery.easing.min.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:48:39 GMT
    vary: Accept-Encoding
    etag: W/"60a56b97-8fe"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: REVALIDATED
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tth2DTiQLIrfnDIu2p2D7fW1DfYR1N5mgZpLSuPJsT7moESYko1Pn5ep4Y1jS79a5fnHHtl6Ml4whtK%2B1W52k25B7VW486TTsdVQzLPwZGUI6DlICHzSMSfz%2F4csmMWVTlbB159QZg%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7431f840a61-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:06 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 07 Oct 2020 16:33:25 GMT
    vary: Accept-Encoding
    etag: W/"5f7dedd5-15d98"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2555
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xD2BT%2FhtPwd9aMt3XwfBpwNAc8YlmJfCRNJdwWPP5%2F4ZuBcXkZBxwtUvG5IQQrbi7esQBmU%2FplUVLch%2BvV%2BiVt1Za8Z6eIdDKs%2F2phjooHDuaz58ZYum%2FUAtw1myz5Z7TZXN9VRBdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a742ac060a75-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-includes/js/wp-embed.min.js?ver=5.7.2
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-includes/js/wp-embed.min.js?ver=5.7.2 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Wed, 06 Jan 2021 15:29:24 GMT
    vary: Accept-Encoding
    etag: W/"5ff5d754-592"
    x-powered-by: PleskLin
    Content-Encoding: gzip
    Cache-Control: max-age=2678400
    CF-Cache-Status: MISS
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5vHGtOwTO5zjZNLJKweV0P2jA3HZYFnDN%2F26Cxz7uxNK5FywLmHSVp7dFzWHxNfb58SuVG8gaVzdLaA0%2B%2B2RbZU3QkTw0S4LdksrDnsl9YPsyc3bwP4KjnXrn1KC66GK4YrVTqwnhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 7805a7433cf40a75-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /wope/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:08 GMT
    Content-Type: image/gif
    Content-Length: 1009
    Connection: keep-alive
    last-modified: Wed, 19 May 2021 19:59:19 GMT
    etag: "60a56e17-3f1"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2817
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9y3UctjiDP16EqRR5C4He9pbNKhQ6EZcUekZkRmEI55fpjiq1zwe9QtTB8dcz4VL3AGTYTl6tQzIpaqG4WGousyYdEfE2P8Ol4n9iHgPSOKjy7tre8OuSTIOomGScMO6aUY%2F9kh6fA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7496c700a75-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://launcherfenix.com.ar/favicon.ico
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /favicon.ico HTTP/1.1
    Accept: */*
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: launcherfenix.com.ar
    Connection: Keep-Alive
    Cookie: _ga=GA1.3.578428232.1672185424; _gid=GA1.3.1676664846.1672185424; _gat_gtag_UA_42563780_8=1; __gads=ID=111ddb53b4bd7a47-2213dace6eda00a7:T=1672181828:RT=1672181828:S=ALNI_MZISx8xyp3QpuAjPp2B8mLIfiIo4g; __gpi=UID=00000b9940097c9d:T=1672181828:RT=1672181828:S=ALNI_MbBeNTfQC046lf8S0pEhcg_Fs_UZA
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:08 GMT
    Content-Type: image/x-icon
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Sun, 30 Dec 2018 21:56:54 GMT
    etag: W/"5c293f26-25be"
    x-powered-by: PleskLin
    Cache-Control: max-age=2678400
    CF-Cache-Status: HIT
    Age: 2545
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5PoVX01azb8yOzLXjx3V4lU0b7t0YStOf5dkJpKQ8TMpCG7pTyTZyiOUqZbEiN6YpMuccCGAZ92YRRwlmIGknCXSm%2BhDxuTwhKwgVRwDJLR1pjPL3PvJ0SjXtZK9YNgp11epD7mFtw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a74d09440a75-AMS
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    DNS
    textures.launcherfenix.com.ar
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    textures.launcherfenix.com.ar
    IN A
    Response
    textures.launcherfenix.com.ar
    IN A
    104.21.72.175
    textures.launcherfenix.com.ar
    IN A
    172.67.153.84
  • flag-unknown
    DNS
    www.paypalobjects.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.paypalobjects.com
    IN A
    Response
    www.paypalobjects.com
    IN CNAME
    ppo.glb.paypal.com
    ppo.glb.paypal.com
    IN CNAME
    paypal.map.fastly.net
    paypal.map.fastly.net
    IN A
    151.101.2.133
    paypal.map.fastly.net
    IN A
    151.101.66.133
    paypal.map.fastly.net
    IN A
    151.101.130.133
    paypal.map.fastly.net
    IN A
    151.101.194.133
  • flag-unknown
    GET
    https://textures.launcherfenix.com.ar/avatar/652e94c0618e198340de7373d8cb8514a99c4900d682e5fbdf8e06bc307f2857
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /avatar/652e94c0618e198340de7373d8cb8514a99c4900d682e5fbdf8e06bc307f2857 HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: textures.launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/octet-stream
    Content-Length: 248
    Connection: keep-alive
    last-modified: Sat, 29 Dec 2018 21:35:58 GMT
    etag: "5c27e8be-f8"
    expires: Wed, 27 Dec 2023 18:53:57 GMT
    Cache-Control: max-age=31536000
    x-powered-by: PleskLin
    access-control-allow-origin: https://launcherfenix.com.ar
    CF-Cache-Status: HIT
    Age: 14591
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5NKSGCS8UEni4%2FkTv0tD%2FwqvcQTbTvcRDpfZRaT9GtlAAGRjErbgR%2Fh0r2%2FDptlq8dDOY2xx0pjmwYbSOo3c1HHcCpQgH8UlnEaAylEmFBRqjoAjQ9wVJVl7%2Bi4G02fBaE3OuZRkU6WWc2JrwoIAxA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7431bcf0bba-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://textures.launcherfenix.com.ar/avatar/dc6c11652530e1a35e39d5aee28b0288180b47b2e065a80f6bc055d3b7972987
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /avatar/dc6c11652530e1a35e39d5aee28b0288180b47b2e065a80f6bc055d3b7972987 HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: textures.launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/octet-stream
    Content-Length: 158
    Connection: keep-alive
    last-modified: Sun, 20 Jun 2021 20:00:27 GMT
    etag: "60cf9e5b-9e"
    expires: Wed, 27 Dec 2023 22:57:08 GMT
    Cache-Control: max-age=31536000
    x-powered-by: PleskLin
    access-control-allow-origin: https://launcherfenix.com.ar
    CF-Cache-Status: MISS
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iByzwjBfvMEJgn3NzWmWXUmr4juZbm6UNySyRy8HVl471eRJQITrhgqdLPMDm4FTKzKRLrPKcwLHSFP4ZgGHdX%2FtA%2Bt5ZD%2BxgOS3cnV7%2Brl6Q1Kgfsm2ESBvwNwHKDUr8vZmEAxWeVF%2B4w4moDj96g%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7431e790e34-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://textures.launcherfenix.com.ar/avatar/cb02385e8ae26e1c5b8c59ea763537426732b1a779ce667ab0401cf037a89eaa
    IEXPLORE.EXE
    Remote address:
    104.21.72.175:443
    Request
    GET /avatar/cb02385e8ae26e1c5b8c59ea763537426732b1a779ce667ab0401cf037a89eaa HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: textures.launcherfenix.com.ar
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    Content-Type: application/octet-stream
    Content-Length: 197
    Connection: keep-alive
    last-modified: Sat, 15 Jun 2019 21:18:17 GMT
    etag: "5d056099-c5"
    expires: Wed, 27 Dec 2023 22:10:11 GMT
    Cache-Control: max-age=31536000
    x-powered-by: PleskLin
    access-control-allow-origin: https://launcherfenix.com.ar
    CF-Cache-Status: HIT
    Age: 2817
    Accept-Ranges: bytes
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UT0nebje4Aoq19KCk6uezDmSPk%2BXoIIAK%2FhConrQXWH36F7EOkkaMgHDre81hdqUImWVb%2BJ7CcCEHXaPndOSayYsNhzXG9sS7TY7o1jdPlme6IGMimxoFQqw2%2Bb4z9zLeBVk12HSvRfztu%2B8DUqxIA%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 7805a7434d37b83a-AMS
    alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
  • flag-unknown
    GET
    https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif
    IEXPLORE.EXE
    Remote address:
    151.101.2.133:443
    Request
    GET /en_US/GB/i/btn/btn_donateCC_LG.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.paypalobjects.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Connection: keep-alive
    Content-Length: 2857
    Cache-Control: s-maxage=31536000, public,max-age=3600
    Content-Type: image/gif
    Dc: ccg11-origin-www-1.paypal.com
    Etag: "pVHXPb+MBLiRl7V57NNkwtYz60afvaFcsfsaRPDZLmE"
    Fastly-Io-Info: ifsz=2858 idim=160x47 ifmt=gif ofsz=2857 odim=160x47 ofmt=gif
    Fastly-Stats: io=1
    Paypal-Debug-Id: 890a7bf5b3a79
    Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com
    Traceparent: 00-0000000000000000000890a7bf5b3a79-15864c0d790aa48d-01
    Via: 1.1 varnish, 1.1 varnish
    Accept-Ranges: bytes
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    X-Served-By: cache-sjc10049-SJC, cache-ams21028-AMS
    X-Cache: HIT, HIT
    X-Cache-Hits: 22023, 4471
    X-Timer: S1672181827.380395,VS0,VE0
    X-Content-Type-Options: nosniff
    Strict-Transport-Security: max-age=31557600
  • flag-unknown
    GET
    https://www.paypalobjects.com/es_XC/i/scr/pixel.gif
    IEXPLORE.EXE
    Remote address:
    151.101.2.133:443
    Request
    GET /es_XC/i/scr/pixel.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.paypalobjects.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Connection: keep-alive
    Content-Length: 42
    Cache-Control: s-maxage=31536000, public,max-age=3600
    Content-Type: image/gif
    Dc: ccg11-origin-www-1.paypal.com
    Etag: "EMKH4Lmcv0jpPecX1lsuI9JDUC4i6ZE+vkcq+Tq/75s"
    Fastly-Io-Info: ifsz=43 idim=1x1 ifmt=gif ofsz=42 odim=1x1 ofmt=gif
    Fastly-Stats: io=1
    Paypal-Debug-Id: 9c1d0f2964d57
    Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com
    Traceparent: 00-00000000000000000009c1d0f2964d57-96258cd22244faa3-01
    Via: 1.1 varnish, 1.1 varnish
    Accept-Ranges: bytes
    Date: Tue, 27 Dec 2022 22:57:07 GMT
    X-Served-By: cache-sjc10023-SJC, cache-ams21072-AMS
    X-Cache: HIT, HIT
    X-Cache-Hits: 12108, 1
    X-Timer: S1672181827.372435,VS0,VE1
    X-Content-Type-Options: nosniff
    Strict-Transport-Security: max-age=31557600
  • flag-unknown
    DNS
    googleads.g.doubleclick.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    googleads.g.doubleclick.net
    IN A
    Response
    googleads.g.doubleclick.net
    IN A
    172.217.168.194
  • flag-unknown
    GET
    https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3288702287375926&output=html&adk=1812271804&adf=3025194257&lmt=1672185424&plat=1%3A1049600%2C2%3A1049600%2C3%3A3145728%2C4%3A3145728%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32&format=0x0&url=https%3A%2F%2Flauncherfenix.com.ar%2Fwope%2Fregister%2F&ea=0&pra=5&wgl=1&dt=1672185424022&bpp=15&bdt=1257&idt=188&shv=r20221207&mjsv=m202212060101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=291041851673&frm=20&pv=2&ga_vid=578428232.1672185424&ga_sid=1672185424&ga_hid=485168795&ga_fc=0&u_tz=0&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=626&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777876%2C42531847%2C44777506%2C31071220%2C44780792&oid=2&pvsid=2733003163831581&tmod=1336827991&nvt=1&eae=2&fc=1920&docm=11&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C1280%2C626&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=1&ifi=1&uci=a!1&dtd=334
    IEXPLORE.EXE
    Remote address:
    172.217.168.194:443
    Request
    GET /pagead/ads?client=ca-pub-3288702287375926&output=html&adk=1812271804&adf=3025194257&lmt=1672185424&plat=1%3A1049600%2C2%3A1049600%2C3%3A3145728%2C4%3A3145728%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32&format=0x0&url=https%3A%2F%2Flauncherfenix.com.ar%2Fwope%2Fregister%2F&ea=0&pra=5&wgl=1&dt=1672185424022&bpp=15&bdt=1257&idt=188&shv=r20221207&mjsv=m202212060101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=291041851673&frm=20&pv=2&ga_vid=578428232.1672185424&ga_sid=1672185424&ga_hid=485168795&ga_fc=0&u_tz=0&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=626&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777876%2C42531847%2C44777506%2C31071220%2C44780792&oid=2&pvsid=2733003163831581&tmod=1336827991&nvt=1&eae=2&fc=1920&docm=11&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C1280%2C626&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=1&ifi=1&uci=a!1&dtd=334 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Content-Encoding: gzip
    Date: Tue, 27 Dec 2022 22:57:08 GMT
    Server: cafe
    Cache-Control: private
    X-XSS-Protection: 0
    Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 27-Dec-2022 23:12:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
    Expires: Tue, 27 Dec 2022 22:57:08 GMT
    Transfer-Encoding: chunked
  • flag-unknown
    GET
    https://googleads.g.doubleclick.net/pagead/html/r20221207/r20190131/zrt_lookup.html
    IEXPLORE.EXE
    Remote address:
    172.217.168.194:443
    Request
    GET /pagead/html/r20221207/r20190131/zrt_lookup.html HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Vary: Accept-Encoding
    X-Content-Type-Options: nosniff
    Content-Encoding: gzip
    Server: cafe
    Content-Length: 4387
    X-XSS-Protection: 0
    Date: Tue, 27 Dec 2022 22:14:59 GMT
    Expires: Tue, 10 Jan 2023 22:14:59 GMT
    Cache-Control: public, max-age=1209600
    ETag: 10353107486223812946
    Content-Type: text/html; charset=UTF-8
    Age: 2529
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
  • flag-unknown
    DNS
    partner.googleadservices.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    partner.googleadservices.com
    IN A
    Response
    partner.googleadservices.com
    IN CNAME
    partner46.googleadservices.com
    partner46.googleadservices.com
    IN A
    142.251.39.98
  • flag-unknown
    DNS
    tpc.googlesyndication.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    tpc.googlesyndication.com
    IN A
    Response
    tpc.googlesyndication.com
    IN A
    142.251.39.97
  • flag-unknown
    GET
    https://tpc.googlesyndication.com/sodar/sodar2.js
    IEXPLORE.EXE
    Remote address:
    142.251.39.97:443
    Request
    GET /sodar/sodar2.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: tpc.googlesyndication.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs"
    Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
    Date: Tue, 27 Dec 2022 22:57:09 GMT
    Expires: Tue, 27 Dec 2022 22:57:09 GMT
    Cache-Control: private, max-age=3000
    ETag: "1637097310169751"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
    Transfer-Encoding: chunked
  • flag-unknown
    GET
    https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
    IEXPLORE.EXE
    Remote address:
    142.251.39.97:443
    Request
    GET /sodar/sodar2/225/runner.html HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Referer: https://launcherfenix.com.ar/wope/register/
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: tpc.googlesyndication.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs"
    Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
    Content-Length: 5046
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Tue, 27 Dec 2022 22:48:04 GMT
    Expires: Wed, 27 Dec 2023 22:48:04 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 21 Jun 2021 20:47:05 GMT
    Content-Type: text/html
    Age: 545
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
  • flag-unknown
    GET
    https://tpc.googlesyndication.com/generate_204?wZbmnA
    IEXPLORE.EXE
    Remote address:
    142.251.39.97:443
    Request
    GET /generate_204?wZbmnA HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: tpc.googlesyndication.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 204 No Content
    Content-Length: 0
    Cross-Origin-Resource-Policy: cross-origin
    Date: Tue, 27 Dec 2022 22:57:11 GMT
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
  • flag-unknown
    DNS
    fe0.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fe0.google.com
    IN A
    Response
  • 162.125.8.18:443
    www.dropbox.com
    tls
    javaw.exe
    408 B
    219 B
    5
    5
  • 162.125.8.18:443
    www.dropbox.com
    tls
    javaw.exe
    408 B
    219 B
    5
    5
  • 162.125.8.18:443
    www.dropbox.com
    tls
    javaw.exe
    408 B
    219 B
    5
    5
  • 104.21.72.175:443
    files.launcherfenix.com.ar
    tls
    javaw.exe
    11.0kB
    495.2kB
    220
    394
  • 13.107.237.67:443
    launchermeta.mojang.com
    tls
    javaw.exe
    354 B
    132 B
    3
    3
  • 172.67.153.84:80
    profile.launcherfenix.com.ar
    javaw.exe
    190 B
    92 B
    4
    2
  • 74.114.154.18:80
    http://iniciolauncherfx.tumblr.com/
    http
    javaw.exe
    743 B
    1.3kB
    7
    5

    HTTP Request

    GET http://iniciolauncherfx.tumblr.com/

    HTTP Response

    302
  • 74.114.154.18:443
    iniciolauncherfx.tumblr.com
    tls
    javaw.exe
    1.6kB
    16.1kB
    17
    19
  • 192.0.77.40:443
    assets.tumblr.com
    tls
    javaw.exe
    1.5kB
    6.8kB
    13
    13
  • 192.0.77.40:443
    assets.tumblr.com
    tls
    javaw.exe
    1.4kB
    6.5kB
    12
    11
  • 192.0.77.40:443
    px.srvcs.tumblr.com
    tls
    javaw.exe
    1.7kB
    7.0kB
    13
    14
  • 192.0.77.40:443
    px.srvcs.tumblr.com
    tls
    javaw.exe
    2.1kB
    1.8kB
    10
    9
  • 192.0.77.40:443
    static.tumblr.com
    tls
    javaw.exe
    1.5kB
    5.8kB
    12
    10
  • 172.67.153.84:80
    profile.launcherfenix.com.ar
    javaw.exe
    190 B
    92 B
    4
    2
  • 172.67.153.84:80
    profile.launcherfenix.com.ar
    javaw.exe
    190 B
    92 B
    4
    2
  • 104.21.72.175:443
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/bg.jpg
    tls, http
    IEXPLORE.EXE
    6.5kB
    151.6kB
    78
    136

    HTTP Request

    GET https://launcherfenix.com.ar/wope/register/

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/style.css?ver=5.3.23

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/plugins/sassy-social-share/admin/css/sassy-social-share-svg.css?ver=3.3.20

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/bg.jpg

    HTTP Response

    200
  • 104.21.72.175:443
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/10/1.13.2-65x65.jpg
    tls, http
    IEXPLORE.EXE
    5.5kB
    60.6kB
    44
    65

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.89

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/css/fancybox.css?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=3.3.20

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.fancybox.min.js?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/aus-pagelink.png

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/uploads/2018/12/LauncherFenix-5.2-Web-65x65.jpg

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/uploads/2018/10/1.13.2-65x65.jpg

    HTTP Response

    200
  • 104.21.72.175:443
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.mousewheel.min.js?ver=5.7.2
    tls, http
    IEXPLORE.EXE
    1.7kB
    10.5kB
    13
    17

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.mousewheel.min.js?ver=5.7.2

    HTTP Response

    200
  • 104.21.72.175:443
    https://launcherfenix.com.ar/wope/wp-content/uploads/2018/08/1.13.1-65x65.jpg
    tls, http
    IEXPLORE.EXE
    3.6kB
    31.7kB
    28
    38

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/navigation.js?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/logo.png

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/images/header-right.png

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/uploads/2018/08/LauncherFenix-4.8.5-Personaje-65x65.png

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/uploads/2018/08/1.13.1-65x65.jpg

    HTTP Response

    200
  • 104.21.72.175:443
    https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.easing.min.js?ver=5.7.2
    tls, http
    IEXPLORE.EXE
    1.1kB
    4.7kB
    9
    10

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/themes/launcher-fenix/js/jquery.easing.min.js?ver=5.7.2

    HTTP Response

    200
  • 104.21.72.175:443
    https://launcherfenix.com.ar/favicon.ico
    tls, http
    IEXPLORE.EXE
    3.5kB
    46.0kB
    32
    50

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-includes/js/jquery/jquery.min.js?ver=3.5.1

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-includes/js/wp-embed.min.js?ver=5.7.2

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/wope/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif

    HTTP Response

    200

    HTTP Request

    GET https://launcherfenix.com.ar/favicon.ico

    HTTP Response

    200
  • 104.21.72.175:443
    https://textures.launcherfenix.com.ar/avatar/652e94c0618e198340de7373d8cb8514a99c4900d682e5fbdf8e06bc307f2857
    tls, http
    IEXPLORE.EXE
    1.1kB
    4.1kB
    8
    6

    HTTP Request

    GET https://textures.launcherfenix.com.ar/avatar/652e94c0618e198340de7373d8cb8514a99c4900d682e5fbdf8e06bc307f2857

    HTTP Response

    200
  • 104.21.72.175:443
    https://textures.launcherfenix.com.ar/avatar/dc6c11652530e1a35e39d5aee28b0288180b47b2e065a80f6bc055d3b7972987
    tls, http
    IEXPLORE.EXE
    1.1kB
    5.1kB
    8
    8

    HTTP Request

    GET https://textures.launcherfenix.com.ar/avatar/dc6c11652530e1a35e39d5aee28b0288180b47b2e065a80f6bc055d3b7972987

    HTTP Response

    200
  • 104.21.72.175:443
    https://textures.launcherfenix.com.ar/avatar/cb02385e8ae26e1c5b8c59ea763537426732b1a779ce667ab0401cf037a89eaa
    tls, http
    IEXPLORE.EXE
    1.1kB
    4.0kB
    8
    6

    HTTP Request

    GET https://textures.launcherfenix.com.ar/avatar/cb02385e8ae26e1c5b8c59ea763537426732b1a779ce667ab0401cf037a89eaa

    HTTP Response

    200
  • 151.101.2.133:443
    https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif
    tls, http
    IEXPLORE.EXE
    1.2kB
    9.9kB
    10
    13

    HTTP Request

    GET https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif

    HTTP Response

    200
  • 151.101.2.133:443
    https://www.paypalobjects.com/es_XC/i/scr/pixel.gif
    tls, http
    IEXPLORE.EXE
    1.2kB
    6.6kB
    9
    11

    HTTP Request

    GET https://www.paypalobjects.com/es_XC/i/scr/pixel.gif

    HTTP Response

    200
  • 172.217.168.194:443
    https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3288702287375926&output=html&adk=1812271804&adf=3025194257&lmt=1672185424&plat=1%3A1049600%2C2%3A1049600%2C3%3A3145728%2C4%3A3145728%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32&format=0x0&url=https%3A%2F%2Flauncherfenix.com.ar%2Fwope%2Fregister%2F&ea=0&pra=5&wgl=1&dt=1672185424022&bpp=15&bdt=1257&idt=188&shv=r20221207&mjsv=m202212060101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=291041851673&frm=20&pv=2&ga_vid=578428232.1672185424&ga_sid=1672185424&ga_hid=485168795&ga_fc=0&u_tz=0&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=626&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777876%2C42531847%2C44777506%2C31071220%2C44780792&oid=2&pvsid=2733003163831581&tmod=1336827991&nvt=1&eae=2&fc=1920&docm=11&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C1280%2C626&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=1&ifi=1&uci=a!1&dtd=334
    tls, http
    IEXPLORE.EXE
    2.2kB
    7.6kB
    12
    13

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3288702287375926&output=html&adk=1812271804&adf=3025194257&lmt=1672185424&plat=1%3A1049600%2C2%3A1049600%2C3%3A3145728%2C4%3A3145728%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32&format=0x0&url=https%3A%2F%2Flauncherfenix.com.ar%2Fwope%2Fregister%2F&ea=0&pra=5&wgl=1&dt=1672185424022&bpp=15&bdt=1257&idt=188&shv=r20221207&mjsv=m202212060101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=291041851673&frm=20&pv=2&ga_vid=578428232.1672185424&ga_sid=1672185424&ga_hid=485168795&ga_fc=0&u_tz=0&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=626&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777876%2C42531847%2C44777506%2C31071220%2C44780792&oid=2&pvsid=2733003163831581&tmod=1336827991&nvt=1&eae=2&fc=1920&docm=11&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C1280%2C626&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=1&ifi=1&uci=a!1&dtd=334

    HTTP Response

    200
  • 172.217.168.194:443
    https://googleads.g.doubleclick.net/pagead/html/r20221207/r20190131/zrt_lookup.html
    tls, http
    IEXPLORE.EXE
    1.1kB
    10.3kB
    10
    11

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/html/r20221207/r20190131/zrt_lookup.html

    HTTP Response

    200
  • 142.251.39.97:443
    https://tpc.googlesyndication.com/generate_204?wZbmnA
    tls, http
    IEXPLORE.EXE
    2.2kB
    19.3kB
    17
    21

    HTTP Request

    GET https://tpc.googlesyndication.com/sodar/sodar2.js

    HTTP Response

    200

    HTTP Request

    GET https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html

    HTTP Response

    200

    HTTP Request

    GET https://tpc.googlesyndication.com/generate_204?wZbmnA

    HTTP Response

    204
  • 142.251.39.97:443
    tpc.googlesyndication.com
    tls
    IEXPLORE.EXE
    670 B
    4.7kB
    8
    8
  • 8.8.8.8:53
    www.dropbox.com
    dns
    javaw.exe
    61 B
    111 B
    1
    1

    DNS Request

    www.dropbox.com

    DNS Response

    162.125.8.18

  • 8.8.8.8:53
    files.launcherfenix.com.ar
    dns
    javaw.exe
    72 B
    104 B
    1
    1

    DNS Request

    files.launcherfenix.com.ar

    DNS Response

    104.21.72.175
    172.67.153.84

  • 8.8.8.8:53
    launchermeta.mojang.com
    dns
    javaw.exe
    69 B
    304 B
    1
    1

    DNS Request

    launchermeta.mojang.com

    DNS Response

    13.107.237.67
    13.107.238.67

  • 8.8.8.8:53
    profile.launcherfenix.com.ar
    dns
    javaw.exe
    74 B
    106 B
    1
    1

    DNS Request

    profile.launcherfenix.com.ar

    DNS Response

    172.67.153.84
    104.21.72.175

  • 8.8.8.8:53
    iniciolauncherfx.tumblr.com
    dns
    javaw.exe
    73 B
    105 B
    1
    1

    DNS Request

    iniciolauncherfx.tumblr.com

    DNS Response

    74.114.154.18
    74.114.154.22

  • 8.8.8.8:53
    assets.tumblr.com
    dns
    javaw.exe
    63 B
    79 B
    1
    1

    DNS Request

    assets.tumblr.com

    DNS Response

    192.0.77.40

  • 8.8.8.8:53
    px.srvcs.tumblr.com
    dns
    javaw.exe
    65 B
    81 B
    1
    1

    DNS Request

    px.srvcs.tumblr.com

    DNS Response

    192.0.77.40

  • 8.8.8.8:53
    static.tumblr.com
    dns
    javaw.exe
    63 B
    79 B
    1
    1

    DNS Request

    static.tumblr.com

    DNS Response

    192.0.77.40

  • 8.8.8.8:53
    launcherfenix.com.ar
    dns
    IEXPLORE.EXE
    66 B
    98 B
    1
    1

    DNS Request

    launcherfenix.com.ar

    DNS Response

    104.21.72.175
    172.67.153.84

  • 8.8.8.8:53
    textures.launcherfenix.com.ar
    dns
    IEXPLORE.EXE
    75 B
    107 B
    1
    1

    DNS Request

    textures.launcherfenix.com.ar

    DNS Response

    104.21.72.175
    172.67.153.84

  • 8.8.8.8:53
    www.paypalobjects.com
    dns
    IEXPLORE.EXE
    67 B
    195 B
    1
    1

    DNS Request

    www.paypalobjects.com

    DNS Response

    151.101.2.133
    151.101.66.133
    151.101.130.133
    151.101.194.133

  • 8.8.8.8:53
    googleads.g.doubleclick.net
    dns
    IEXPLORE.EXE
    73 B
    89 B
    1
    1

    DNS Request

    googleads.g.doubleclick.net

    DNS Response

    172.217.168.194

  • 8.8.8.8:53
    partner.googleadservices.com
    dns
    IEXPLORE.EXE
    74 B
    114 B
    1
    1

    DNS Request

    partner.googleadservices.com

    DNS Response

    142.251.39.98

  • 8.8.8.8:53
    tpc.googlesyndication.com
    dns
    IEXPLORE.EXE
    71 B
    87 B
    1
    1

    DNS Request

    tpc.googlesyndication.com

    DNS Response

    142.251.39.97

  • 8.8.8.8:53
    fe0.google.com
    dns
    IEXPLORE.EXE
    60 B
    110 B
    1
    1

    DNS Request

    fe0.google.com

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9ea946c012d13a9425a1b4d718b2bbe9

    SHA1

    e5477705e309441e8c5a2386c7f60c133a0c88a0

    SHA256

    402155b883a808a32010378e22ed11ad6c0fa69f0e29e737eb4de70b3024abd6

    SHA512

    6dd781f370aa5fa9d468c418c5a52d89ffb00ebdc2c7f0ff75c26a039429e6006edd76070ef20f61f0ab97a0183dd4372ed49eb3095ceb20d759a8543cf7567c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\t9o3c8r\imagestore.dat

    Filesize

    9KB

    MD5

    aa45184b60fc45f4333cd0e8bc45d45c

    SHA1

    c11f4c9776f0cad1e35a21cd99eb41f2747a25ce

    SHA256

    1d66057b9ec253248a6dea12c8945d90f96d9e4131c186c13fae7b66cb159276

    SHA512

    e6b4a86c0d3c9a2cf9a1acfac8b42b39365084254a3e77c496840687444326ccd0c296139874fa507e64682647d60f80909189dfc8bd2180bc81f5cf502dced4

  • memory/1220-75-0x00000000021F0000-0x00000000051F0000-memory.dmp

    Filesize

    48.0MB

  • memory/1220-77-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-71-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-72-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-73-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-76-0x0000000000280000-0x000000000028A000-memory.dmp

    Filesize

    40KB

  • memory/1220-70-0x0000000000280000-0x000000000028A000-memory.dmp

    Filesize

    40KB

  • memory/1220-78-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-79-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-80-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1220-67-0x00000000021F0000-0x00000000051F0000-memory.dmp

    Filesize

    48.0MB

  • memory/1220-56-0x000007FEFB5B1000-0x000007FEFB5B3000-memory.dmp

    Filesize

    8KB

  • memory/2044-54-0x0000000075A91000-0x0000000075A93000-memory.dmp

    Filesize

    8KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.