IP 74.115.51.4:0
File typegzip compressed data, from Unix Hash925ca302f835a32ea0287d10da64de57 a044fb265f2976aacd9a117e30d6b4bdf06f5637 d80a330583281e020c7ea6149376111ec9c41731a519577e12002e213f3f4f89
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AT&T Inc. | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: g4zl7yyq.square.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 16:18:17 GMT
content-type: text/html; charset=UTF-8
cf-ray: 879fa5e30f71b518-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
x-host: grn129.sf2p.intern.weebly.net
x-request-id: ee00526f1f1b0cb57811b69c8847da8e
x-revision: bbed425ad33677ed971fa0e46290776cd9bad534
set-cookie: publishedsite-xsrf=eyJpdiI6InE2aERLZlg0aHRtTytpTVBFQmtJeGc9PSIsInZhbHVlIjoiMzB6c1E4dUMwdGxZcU9BQWNoZGsvaExFV1Q4ZDYvV2tFTjFXYmYrRUJjSFE3WktFNGRsbDlJNmlRenRsd2xMRURxVjY0cFpmTnIrMmRkQVdBemV3NVIzczlaK3RlTWpBWXM1VWhaU0kybjhtUnhJTlMwS3hnZXNPMGFjNzNMOWsiLCJtYWMiOiI0N2NmYjNlNjFiOGQ2OTMyMmM0YjU0YzU4YWM5ZjQ1YzI1MWI1ZDk4Mzk5ZTQxNjFiYmQwYjY2MjYxMzBmMTlmIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:16 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6ImRFY1lPRFJvYkh0NXdEZGxSNkNMUGc9PSIsInZhbHVlIjoiUzREUWI1d1MvNWtEbFVoN0pMUzFzRklRakFIWW1QaC92enM2K280SWV0dGhNQ2FIQmpEbzNUcm5DNFRZYlFheDZLRUZvMTdxbnBQa1BCN3BiLzBjbDM5RmhvbXJkVzJHdmtkdG0rZ2t0U0FiUE9LbDBYN1VWSWZCZUtDY0d1NzIiLCJtYWMiOiI0OWI5MjE0YTAwNDk1YTEzOTBhNTRhZjY3N2VlZjkwYWIyNTEyYzIwMjBiM2RmODlmZWRkMzgxYmI5NzAyN2FiIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:16 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6InY3bU1ueEdqUlJ2VlVyL0lJaWdKOUE9PSIsInZhbHVlIjoiNFduZUs2TnIwYVVpZ05NOFRhN3JlRG9LOWt6aFJFOWZUSDVjblF0T1JUZkhXdDcwMHY1dDBReUhrbUVtQUwrWXlYdEgwUzFGQXNLYjRzRnViMTNnWDRGRWdSdlpWNi9yY2FPY0svNURXUHNmZ1RtMVJ2dlZNQjJBeGx4T2R1QWgiLCJtYWMiOiJmNzllYWYzMDcyZGRjMDAzMzljNWM4MTY4NjZhNGEyYzI0NDk4ZmExYjM5YzQ2ZWM5ZDJlY2ZmODk3YTVlMjJjIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:16 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
__cf_bm=rU2QuGRP3biTd4brlanE7DzlSV9EJT3Z4ctUl16_GK8-1714061897-1.0.1.1-tH3BISdctmHwK23ZmF50U2Eu.SAksRTgYTfv5Q2aCYuvegaXMo6SoOEcytjmpjjEXCbz0btBidE5eu8EDqGI_w; path=/; expires=Thu, 25-Apr-24 16:48:17 GMT; domain=.square.site; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
IP74.115.51.4:0
File typeHTML document, ASCII text Hashaf739691506d760cd047a3a53902de5e 2a2c161c1fbbbab702e57ce97819f390ed87f4aa cc243c29571e3b96f70715a9350c71c3c9a53ad8a30388443a598f11269023c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AT&T Inc. | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: g4zl7yyq.square.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6InE2aERLZlg0aHRtTytpTVBFQmtJeGc9PSIsInZhbHVlIjoiMzB6c1E4dUMwdGxZcU9BQWNoZGsvaExFV1Q4ZDYvV2tFTjFXYmYrRUJjSFE3WktFNGRsbDlJNmlRenRsd2xMRURxVjY0cFpmTnIrMmRkQVdBemV3NVIzczlaK3RlTWpBWXM1VWhaU0kybjhtUnhJTlMwS3hnZXNPMGFjNzNMOWsiLCJtYWMiOiI0N2NmYjNlNjFiOGQ2OTMyMmM0YjU0YzU4YWM5ZjQ1YzI1MWI1ZDk4Mzk5ZTQxNjFiYmQwYjY2MjYxMzBmMTlmIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImRFY1lPRFJvYkh0NXdEZGxSNkNMUGc9PSIsInZhbHVlIjoiUzREUWI1d1MvNWtEbFVoN0pMUzFzRklRakFIWW1QaC92enM2K280SWV0dGhNQ2FIQmpEbzNUcm5DNFRZYlFheDZLRUZvMTdxbnBQa1BCN3BiLzBjbDM5RmhvbXJkVzJHdmtkdG0rZ2t0U0FiUE9LbDBYN1VWSWZCZUtDY0d1NzIiLCJtYWMiOiI0OWI5MjE0YTAwNDk1YTEzOTBhNTRhZjY3N2VlZjkwYWIyNTEyYzIwMjBiM2RmODlmZWRkMzgxYmI5NzAyN2FiIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6InY3bU1ueEdqUlJ2VlVyL0lJaWdKOUE9PSIsInZhbHVlIjoiNFduZUs2TnIwYVVpZ05NOFRhN3JlRG9LOWt6aFJFOWZUSDVjblF0T1JUZkhXdDcwMHY1dDBReUhrbUVtQUwrWXlYdEgwUzFGQXNLYjRzRnViMTNnWDRGRWdSdlpWNi9yY2FPY0svNURXUHNmZ1RtMVJ2dlZNQjJBeGx4T2R1QWgiLCJtYWMiOiJmNzllYWYzMDcyZGRjMDAzMzljNWM4MTY4NjZhNGEyYzI0NDk4ZmExYjM5YzQ2ZWM5ZDJlY2ZmODk3YTVlMjJjIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 25 Apr 2024 16:18:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://g4zl7yyq.square.site
CF-Ray: 879fa5e95cd6b4fd-OSL
CF-Cache-Status: DYNAMIC
Cache-Control: no-cache, private
X-Host: grn50.sf2p.intern.weebly.net
X-Request-ID: 2b35f5167466e4f88b470700b97a16a6
X-Revision: bbed425ad33677ed971fa0e46290776cd9bad534
Set-Cookie: publishedsite-xsrf=eyJpdiI6IkRZcUVKc2VsSU9oZlpKMGVlalJNL0E9PSIsInZhbHVlIjoiL2dHakxIMGpNdXkzWWdWeTlQSHRqM1oyLzczZDRpeXpSVjJLbVZkQzl0Ymc1TVlWdDZoczZMRVh3TWl6b0V5NVdrQStvS3FLak5wZjdtbUwwUU9tYUxYMTFyZ0hodEhnUnUwMWtJa09sdWIrejYrSzFmTE4rU1NrT2pjd2FZMDAiLCJtYWMiOiJhNmM0MTAyOTM2MTQ4ZTViYTJlMzQ5YjQ5ZjAyNmI5NWYyN2QzNTk4NGVlMTc1OGE5NDQ2NGRjYzdmOTM1ODVkIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:17 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IkRXUTlScnVlc0lWZ2NGR2VvUHpzN3c9PSIsInZhbHVlIjoiK1BUdmQ4L1B3bkRFaDFwb0FOR3BHVE03c29Tcjc0T1EwaEF2dFRxRkpSSlNqRTMraGsyQUZ5OUxra0M5R2F2NjZDUWp5V2R3Vnd6QVQyYTIwVFFnazk5Z01UcTROYzc2NUxTb0ZRRGdLTC9LbW1GalNPU1ZxS2lDak5oSStYOWUiLCJtYWMiOiI3YjRiZWYwZmI2Y2RlYWFkMzc4Y2MxZjYzZjc2MzAyNTU3ZWQ2MWZhMDljNzk3YzM1YTNlYjM2NTgxYTRkYzkwIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:17 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6IkpoS3RtdXcrODRnQVdFSnM2RHZZU2c9PSIsInZhbHVlIjoiVjdZRVlma1JtS283dkFvRGwvTW1rYWk5YThHYUNBYUpzblhCZU52a0Q3RU9xTUNlaHU5WGxPeENUcVBzVy9lbGs5ajIveVphQmRTU3FtVEVsZHJLMGJGWnQ1RzM3aU1kRzYvYlZDU25qM1RHdzBhUnBDV1Z3N1lXS0NLYTkyRm0iLCJtYWMiOiI4MzdmYTZmZDQ4NGNiODdlZTA0NzQ3NGI1MjBjNDkwNmFmNzNiMDQxYmJiOGJlMDkwZTdiMDg4ZDRkNWRiNWMxIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:17 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
__cf_bm=m9OCsPJS52D4E.dbQK2vpVzdODuByJzrINQfDh8YSCg-1714061898-1.0.1.1-4cLbNZlj6j8m_9yWXlJZHWR1tN7hOZ9mkUV_nNxJJ1WwYvHd.B_chE5VEOu7J1gcjryz9.97Yq3HVJiUpPUJKg; path=/; expires=Thu, 25-Apr-24 16:48:18 GMT; domain=.square.site; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
|
IP74.115.51.4:0
File typegzip compressed data, from Unix Hash4f09210277918434e7925cb1f7131b78 efaa1b7c5d425d72a20e5ac5f37def4e09e4adc3 10459ab13cacc6e033d73cb08599e03eea0129e6e9978ba98d1fb93eaabb3e6f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AT&T Inc. | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: g4zl7yyq.square.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkRZcUVKc2VsSU9oZlpKMGVlalJNL0E9PSIsInZhbHVlIjoiL2dHakxIMGpNdXkzWWdWeTlQSHRqM1oyLzczZDRpeXpSVjJLbVZkQzl0Ymc1TVlWdDZoczZMRVh3TWl6b0V5NVdrQStvS3FLak5wZjdtbUwwUU9tYUxYMTFyZ0hodEhnUnUwMWtJa09sdWIrejYrSzFmTE4rU1NrT2pjd2FZMDAiLCJtYWMiOiJhNmM0MTAyOTM2MTQ4ZTViYTJlMzQ5YjQ5ZjAyNmI5NWYyN2QzNTk4NGVlMTc1OGE5NDQ2NGRjYzdmOTM1ODVkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkRXUTlScnVlc0lWZ2NGR2VvUHpzN3c9PSIsInZhbHVlIjoiK1BUdmQ4L1B3bkRFaDFwb0FOR3BHVE03c29Tcjc0T1EwaEF2dFRxRkpSSlNqRTMraGsyQUZ5OUxra0M5R2F2NjZDUWp5V2R3Vnd6QVQyYTIwVFFnazk5Z01UcTROYzc2NUxTb0ZRRGdLTC9LbW1GalNPU1ZxS2lDak5oSStYOWUiLCJtYWMiOiI3YjRiZWYwZmI2Y2RlYWFkMzc4Y2MxZjYzZjc2MzAyNTU3ZWQ2MWZhMDljNzk3YzM1YTNlYjM2NTgxYTRkYzkwIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IkpoS3RtdXcrODRnQVdFSnM2RHZZU2c9PSIsInZhbHVlIjoiVjdZRVlma1JtS283dkFvRGwvTW1rYWk5YThHYUNBYUpzblhCZU52a0Q3RU9xTUNlaHU5WGxPeENUcVBzVy9lbGs5ajIveVphQmRTU3FtVEVsZHJLMGJGWnQ1RzM3aU1kRzYvYlZDU25qM1RHdzBhUnBDV1Z3N1lXS0NLYTkyRm0iLCJtYWMiOiI4MzdmYTZmZDQ4NGNiODdlZTA0NzQ3NGI1MjBjNDkwNmFmNzNiMDQxYmJiOGJlMDkwZTdiMDg4ZDRkNWRiNWMxIiwidGFnIjoiIn0%3D; __cf_bm=rU2QuGRP3biTd4brlanE7DzlSV9EJT3Z4ctUl16_GK8-1714061897-1.0.1.1-tH3BISdctmHwK23ZmF50U2Eu.SAksRTgYTfv5Q2aCYuvegaXMo6SoOEcytjmpjjEXCbz0btBidE5eu8EDqGI_w
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 16:18:18 GMT
content-type: text/html; charset=UTF-8
cf-ray: 879fa5ee9b35b518-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
set-cookie: publishedsite-xsrf=eyJpdiI6IjhQNVpuaVJYQmU4V0dwblcyTXFNK0E9PSIsInZhbHVlIjoiUjBxT2M0blFKOXBFejlYM3RERzRhTEVrWTFkeTFJS1dEOWRobUh2dm8vQWtBU3ZMQTJuNWYzVkN4UWtqUkNmREhxcUZXRWJpS29pdVpKajlscnczSDFCRGQ0NzJCbWtuTXZ1dFRHRE1MNzAxYzd1dVlPTjRCdHdTWnlYVXFibmwiLCJtYWMiOiJmMWY1ODU4Y2U2ZWM1ZmQ0NThkNDZjMWY4ZmMwMWJkZGNlNGU1NTVkNWZiNDk4NDVkZGQ3MTFlYjZhNGIzODA1IiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:18 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IkRxNnZMdHUzTUNISW5sbTNaUzZoZGc9PSIsInZhbHVlIjoicWhrb0FMSlVlTnYwelZLTlIrQ0J6ZGNHVk5hUzBKZUxDem90TEtDTDUwMC9DbkJYUXdTb0g1cERuNnMzQzNzS3BSL0dac1duZUVMbkh2bzIyY3pMdXZvVVBaV3pSOEIwMUhPMnFQVy9tSUZYcmdvQm9qUkdsQk9EUy8xRHRGSXEiLCJtYWMiOiIwOTUzYjQyOGE1NmVjM2FjNTMwOTQ0NjVjZTMyOTU5OGU1N2M2MDlkMDZhYWUzOTA0ZjE2YWVkNTBkNWVmZWJjIiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:18 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6Ik85dG8vRUI4SFZnL2ZwQVB2U1ZmVGc9PSIsInZhbHVlIjoidk4vUzZtL1hraXhybU8zWWFKUDlKbG5MbTFPOW1PT2dYaHd2L3gzSk1FUDJ1U2FMMWtxRG5OZHpwaTd2Q1k0M1FhSlUvN2xQdHRldXVhcUwySndGa0Rrd2JDWlhEeXg5eEp1ckd2ZWxvQTFmTHpKN2gzR2l1aGtDQm9STnowNVUiLCJtYWMiOiJhMTg3MTZhZWM0YTdlYjk2MTFhNjQ1NGUyZTdhNzk2NWQyMjQ0ZTYyYTJjMGZhOGIwZmZhMmExYTA2ZTgxZTI1IiwidGFnIjoiIn0%3D; expires=Thu, 09-May-2024 16:18:18 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
x-host: grn50.sf2p.intern.weebly.net
x-request-id: 12d6f080eafd7fb0885cab5398a9f7fe
x-revision: bbed425ad33677ed971fa0e46290776cd9bad534
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|