rgtihjeg8qo3tu4.weebly.com/
200 OK 7.4 kB URL User Request GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/
IP
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2260), with CRLF, LF line terminators
Hash 0fae93ce02acff3f23122f0bfaaebff9
98705be60b75fe912925859ce975d97dd4ad43b8
9bfa48d359b914b378fe76c12fdc79a93d353c619555eea412fbb32588259f8e
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET / HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 06 Dec 2023 00:45:12 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=rgtihjeg8qo3tu4.weebly.com
language=en; expires=Wed, 20-Dec-2023 00:45:12 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"0fae93ce02acff3f23122f0bfaaebff9-gzip"
Content-Encoding: gzip
X-Host: blu66.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 7420
Keep-Alive: timeout=10, max=32
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/fonts/Crimson_Text/font.css?2
200 OK 331 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Crimson_Text/font.css?2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 38f5e1c7a71fd59e62d0fff4f17a3866
4ff0413d0426156832061df8aeed1cb930a0c8f6
643d059a80e851fe957ef59db9e6b2070fe58ec330b04db18da63203c21ffb14
GET /fonts/Crimson_Text/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 21:22:38 GMT
etag: "655e711e-6ca"
expires: Tue, 12 Dec 2023 11:40:25 GMT
cache-control: max-age=1209600
x-host: blu20.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 651888
x-served-by: cache-sjc1000110-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 537, 2
x-timer: S1701823513.298660,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 331
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Amaranth/font.css?2
200 OK 326 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Amaranth/font.css?2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash ad724022b79a94759b10873a3543915f
dd699e5a42cc5d77af7aea9291b6ec08c482b9d8
cd8af641a221071bf7ba8649e5dc9eaf9df9b5a8d80e51e5cc1522b075230b24
GET /fonts/Amaranth/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-6ba"
expires: Wed, 06 Dec 2023 14:09:58 GMT
cache-control: max-age=1209600
x-host: grn64.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 1161315
x-served-by: cache-sjc10080-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 61, 4
x-timer: S1701823513.298660,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 326
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1684508919
200 OK 1.2 kB URL GET HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1684508919
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3910)
Hash 1dcebbb5a1eb8b028310ceeb72a339b3
e254b7a35ac189fd1ce9cf8bd78593bebfe27d7d
865cb87de9fc4d6530edce21f0103107abae6abe45cabdff2ad9af067b3d8e0a
GET /css/old/fancybox.css?1684508919 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 17 Nov 2023 23:10:38 GMT
etag: "6557f2ee-f47"
expires: Wed, 06 Dec 2023 11:12:08 GMT
cache-control: max-age=1209600
x-host: grn144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 1171985
x-served-by: cache-sjc1000131-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 1079, 1
x-timer: S1701823513.298707,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/jquery-1.8.3.min.js
200 OK 34 kB URL GET HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65483)
Hash 3576a6e73c9dccdbbc4a2cf8ff544ad7
06e872300088b9ba8a08427d28ed0efcdf9c6ff5
61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:01 GMT
etag: "655e8689-16dc4"
expires: Tue, 12 Dec 2023 23:08:15 GMT
cache-control: max-age=1209600
x-host: grn149.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 610618
x-served-by: cache-sjc10032-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 16, 3998
x-timer: S1701823513.299453,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1684508919&
200 OK 33 kB URL GET HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1684508919&
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash 5925dea9d02b39d0e66e7ccc20371e80
79723f4fdf3c06cbc6a7b44fcc78cb1de7793be0
3b7805a3f0e4750ab90d4c40f0d1efdf11c5deb485ef9ed12b9c89b000f87f82
GET /js/lang/en/stl.js?buildTime=1684508919& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 20:33:53 GMT
etag: "6568f1b1-2c90e"
expires: Fri, 15 Dec 2023 11:09:36 GMT
cache-control: max-age=1209600
x-host: blu85.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 394537
x-served-by: cache-sjc1000097-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 65, 1
x-timer: S1701823513.299432,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33107
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1691794563
200 OK 13 kB URL GET HTTP/2 cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32013)
Hash 300d1d919e099f1ab21284c2a2002183
32e29e65a1de41e0882eb506d6d800e182a2f348
c9defa51976e3ae85c45b8167e1f46678b14c7d8c54bdda2652d01d0569906a8
GET /js/old/slideshow-jq.js?buildTime=1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 04 Dec 2023 21:20:46 GMT
etag: "656e42ae-9e0b"
expires: Tue, 19 Dec 2023 17:26:03 GMT
cache-control: max-age=1209600
x-host: grn43.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 26350
x-served-by: cache-sjc10038-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 59, 1
x-timer: S1701823513.299384,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13265
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/slideshow/slideshow.css?1691794563
200 OK 1.5 kB URL GET HTTP/2 cdn2.editmysite.com/css/old/slideshow/slideshow.css?1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (7352)
Hash 3986db9081b6f62ae765b55503b9f6ad
540abfb00daf931ae669d924704d97268a07c631
054411e5423615254088341e90d1c49c68e19e016690034b95437499ea18ba87
GET /css/old/slideshow/slideshow.css?1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 22:54:27 GMT
etag: W/"655e86a3-1cb9"
expires: Sun, 10 Dec 2023 08:19:07 GMT
cache-control: max-age=1209600
x-host: blu108.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 836765
x-served-by: cache-sjc1000133-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 667, 1
x-timer: S1701823513.299469,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1488
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1701815261
200 OK 1.4 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1701815261
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3600), with no line terminators
Hash 40b81b2d52ba9d2e2c64c31ff6a24cd7
6b5689250661646ecbb841f2475f1556a113373c
e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96
GET /js/site/footerSignup.js?buildTime=1701815261 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 17:26:35 GMT
etag: "656f5d4b-e10"
expires: Tue, 19 Dec 2023 22:29:36 GMT
cache-control: max-age=1209600
x-host: grn115.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 8136
x-served-by: cache-sjc10078-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 21, 8
x-timer: S1701823513.305458,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1372
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Lato/font.css?2
200 OK 365 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Lato/font.css?2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 8748eec74f3e1353ff5d59c4fc793928
5c585058ebe43354156e0c7f1c40937128804fa7
cb2642e037c6e74eace100541b7e6776ecaf14371b49e4decf7831bfb0a7147b
GET /fonts/Lato/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 21:22:38 GMT
etag: "655e711e-a0c"
expires: Tue, 12 Dec 2023 11:01:00 GMT
cache-control: max-age=1209600
x-host: blu87.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 654253
x-served-by: cache-sjc1000096-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 991
x-timer: S1701823513.307099,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 365
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1684508919
200 OK 1.6 kB URL GET HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1684508919
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (13080)
Hash 7b0a49a5f45c5bd69dd5aecf253d3b1c
2bfd9ce331c46b5b1fd170325a44bf217c56cba5
0cfbd18a308599498691e5c5bcea11d5826b7d039388de71f6c6760797a78037
GET /css/social-icons.css?buildtime=1684508919 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 22:54:09 GMT
etag: W/"655e8691-3319"
expires: Sat, 09 Dec 2023 11:36:06 GMT
cache-control: max-age=1209600
x-host: grn148.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 911346
x-served-by: cache-sjc1000134-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 31, 1
x-timer: S1701823513.305404,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1640
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1691794563
200 OK 3.7 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12622), with no line terminators
Hash b6889bf0cfd5fbd322bdac1906f1bf6e
8b540420c0922ed3f8188d81c7475e1f4b63f347
c4f595f154c135e6631df3e3a986a1fdebda177a47a91cbb9e645d37a0e03311
GET /js/site/theme-plugins.js?buildTime=1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 23:10:56 GMT
etag: "6557f300-314e"
expires: Wed, 06 Dec 2023 08:14:31 GMT
cache-control: max-age=1209600
x-host: grn40.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 1182641
x-served-by: cache-sjc10039-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 2493, 1
x-timer: S1701823513.305471,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3747
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Montserrat/font.css?2
200 OK 276 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Montserrat/font.css?2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 91b360ae11a20a31e6a9ca60c6f6c691
ec3c5c553a20655c54b0a5577a15abe576efa9b1
cf91769ae11889ad46b8090d0d4d58a4621f2bcea35d1d8d96ea5e38ba34ee73
GET /fonts/Montserrat/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 29 Nov 2023 00:53:25 GMT
etag: "65668b85-354"
expires: Wed, 13 Dec 2023 09:08:46 GMT
cache-control: max-age=1209600
x-host: etl125.las.intern.weebly.net
content-encoding: gzip
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
via: 1.1 varnish
age: 574587
x-served-by: cache-bma1638-BMA
x-cache: HIT
x-cache-hits: 1632
x-timer: S1701823513.310612,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 276
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Lora/font.css?2
200 OK 321 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Lora/font.css?2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 428a6a35ff81f3f17d516e447cbfa606
73b876668c417277423edd1b2e1f70275f73dad3
69822a307cb14d50cb0b33dacd3ca2b281aa05ee910af0a2a969a60ab055f1aa
GET /fonts/Lora/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 21:22:38 GMT
etag: "655e711e-6aa"
expires: Tue, 12 Dec 2023 11:41:34 GMT
cache-control: max-age=1209600
x-host: blu20.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 651819
x-served-by: cache-sjc1000110-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 898
x-timer: S1701823513.310904,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 321
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/sites.css?buildTime=1691794563
200 OK 30 kB URL GET HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 251fe9dd065a30efd11ccab9a9613cda
9c8bec2886368f245985ae92222349ba92ac07f7
5b6bd64c8f7d37dd7bd34e3760cfffa93a982937376e2c02708f63c35c645a07
GET /css/sites.css?buildTime=1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 04 Dec 2023 21:20:21 GMT
etag: W/"656e4295-337f6"
expires: Tue, 19 Dec 2023 14:28:03 GMT
cache-control: max-age=1209600
x-host: grn75.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 37029
x-served-by: cache-sjc10059-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 110, 1
x-timer: S1701823513.306001,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29663
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1691794563&
200 OK 33 kB URL GET HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1691794563&
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash 5925dea9d02b39d0e66e7ccc20371e80
79723f4fdf3c06cbc6a7b44fcc78cb1de7793be0
3b7805a3f0e4750ab90d4c40f0d1efdf11c5deb485ef9ed12b9c89b000f87f82
GET /js/lang/en/stl.js?buildTime=1691794563& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:52:59 GMT
etag: "655e864b-2c90e"
expires: Tue, 12 Dec 2023 15:06:32 GMT
cache-control: max-age=1209600
x-host: grn29.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 639521
x-served-by: cache-sjc1000114-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 23, 1
x-timer: S1701823513.305491,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33107
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
200 OK 9.7 kB URL GET HTTP/2 cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type PNG image data, 199 x 97, 8-bit colormap, non-interlaced\012- data
Hash 6e0f7ad31bf187e0d88fc5787573ba71
14e8b85cc32a01c8901e4ac0160582d29a45e9e6
580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduBRDjRVf4aujFpQt8U1R0AZRrT0tvE8fm-z8w_U2xex-GMjAJYQnABttdWeDPxN6Xmm0qeYmzq9wQe4BBub96qvpXffxjW
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 01 Sep 2023 02:23:15 GMT
last-modified: Tue, 12 Feb 2019 18:19:08 GMT
etag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
content-type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
via: 1.1 varnish
age: 252402
x-served-by: cache-bma1638-BMA
x-cache: HIT
x-cache-hits: 1245
x-timer: S1701823513.305424,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9677
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1691794563
200 OK 146 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32147)
Size 146 kB (146401 bytes)
Hash 0de029f7ed3fd4cbfdcef31b834138e3
224512b5c840e885cd0732822af53301681ec799
593fec175b00a1f118f77bb8ed378e857e9f1225f0fc019fcea508b27da53cf0
GET /js/site/main.js?buildTime=1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:32 GMT
etag: "655e86a8-74804"
expires: Tue, 12 Dec 2023 10:31:18 GMT
cache-control: max-age=1209600
x-host: grn30.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 656034
x-served-by: cache-sjc1000125-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 75, 1
x-timer: S1701823513.299405,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146401
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1691794563
200 OK 159 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1691794563
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32029)
Size 159 kB (159104 bytes)
Hash 477945f3201c7b0c701a23b373cadb2a
ac7582e7ab946ce51cb94431cb026ebe6dbce9c2
207ec261a8530654204ada78a03b0cc6c129c09bac87013c3a8bb3bedfe84be6
GET /js/site/main-customer-accounts-site.js?buildTime=1691794563 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 04 Dec 2023 21:20:46 GMT
etag: "656e42ae-826d7"
expires: Tue, 19 Dec 2023 14:28:04 GMT
cache-control: max-age=1209600
x-host: grn75.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:13 GMT
age: 37029
x-served-by: cache-sjc10059-SJC, cache-bma1638-BMA
x-cache: HIT, HIT
x-cache-hits: 123, 1
x-timer: S1701823513.305453,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159104
X-Firefox-Spdy: h2
rgtihjeg8qo3tu4.weebly.com/files/main_style.css?1684576668
200 OK 8.1 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/files/main_style.css?1684576668
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (936)
Hash 1db6238e83db0e12c3ae8dab67b1c806
01793be93695c7dabbcdbddafd8c7e2a53537bc2
19a5293ad060c64a8e34fca5bbe54a02d9ac1ac06f635a7a477c8db143ed7715
GET /files/main_style.css?1684576668 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu155.sf2p.intern.weebly.net
Content-Encoding: gzip
rgtihjeg8qo3tu4.weebly.com/files/templateArtifacts.js?1684576668
200 OK 1.6 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/files/templateArtifacts.js?1684576668
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (1630)
Hash ae81ab7069097a055829fb9919258138
7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a
5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af
GET /files/templateArtifacts.js?1684576668 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn138.sf2p.intern.weebly.net
Content-Encoding: gzip
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/published/img-8850.png?1684576635
200 OK 5.6 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/published/img-8850.png?1684576635
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 162 x 49, 8-bit/color RGB, non-interlaced\012- data
Hash 8896f72e8b5ff526e13a80ef50b218f4
d2aa267d7481278d969d8ff9d200bfe0e3596f8f
caf22cba82988581768018f3f5ca10a8353f0d2278a3a4e3a34b2d2deb439cd3
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/published/img-8850.png?1684576635 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: image/png
Content-Length: 5619
Connection: keep-alive
Last-Modified: Sat, 20 May 2023 09:57:15 GMT
x-rgw-object-type: Normal
ETag: "8896f72e8b5ff526e13a80ef50b218f4"
x-amz-request-id: tx000005c663a2b055236cd-00656f8090-db1c67d-sfo1
X-Storage-Bucket: zcaf2
X-Storage-Object: caf22cba82988581768018f3f5ca10a8353f0d2278a3a4e3a34b2d2deb439cd3
X-Host: blu14.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/bt-white.png
200 OK 2.1 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/bt-white.png
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 193 x 129, 8-bit colormap, non-interlaced\012- data
Hash cd72040f6aa93d4efdbca1523c3fab94
771379793afa494267ecfce7ee0a3b51669fb7e5
d2ed4d8b2fca8a882e95e98cf4db38fffdced1725c93f9e07d213bdbfb3f301e
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/bt-white.png HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: image/png
Content-Length: 2116
Connection: keep-alive
Last-Modified: Sun, 07 May 2023 21:20:18 GMT
x-rgw-object-type: Normal
ETag: "cd72040f6aa93d4efdbca1523c3fab94"
x-amz-request-id: tx000002196624729c36345-00656f7df4-db1c716-sfo1
X-Storage-Bucket: zd2ed
X-Storage-Object: d2ed4d8b2fca8a882e95e98cf4db38fffdced1725c93f9e07d213bdbfb3f301e
X-Host: blu22.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/files/theme/plugins.js?1573850854
200 OK 18 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/files/theme/plugins.js?1573850854
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
Hash 86db86f3ec46612c95a552a133cf2501
ea949b709233c0f69f9ca1a2f38aab7e12c90c1b
8a295e631b0d74ebc6b734fdd9a2d5b29653da10a362599b0004ee135c115ce9
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /files/theme/plugins.js?1573850854 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 28 Jan 2022 02:17:25 GMT
x-rgw-object-type: Normal
ETag: W/"86db86f3ec46612c95a552a133cf2501"
x-amz-request-id: tx000000000000001be8b0f-006284827e-b9fbc63-sfo1
X-Storage-Bucket: z8a29
X-Storage-Object: 8a295e631b0d74ebc6b734fdd9a2d5b29653da10a362599b0004ee135c115ce9
X-Host: grn138.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/fonts/Crimson_Text/regular.woff2
200 OK 25 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Crimson_Text/regular.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 25184, version 1.0\012- data
Hash 23eec75ba54d389a0188abbb596b7614
daa4672ad515a108325f52116e9a49aab8cdd5fa
538c7067580f457dd3dd98ebaabeb19405c12bdd01674d3db8fd9948ee73c862
GET /fonts/Crimson_Text/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25184
server: nginx
content-type: font/woff2
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-6260"
expires: Wed, 06 Dec 2023 13:07:29 GMT
cache-control: max-age=1209600
x-host: grn22.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 1165065
x-served-by: cache-sjc10060-SJC, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 7960, 3
x-timer: S1701823514.238508,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Lato/regular.woff2
200 OK 24 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Lato/regular.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /fonts/Lato/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23580
server: nginx
content-type: font/woff2
last-modified: Wed, 29 Nov 2023 00:53:25 GMT
etag: "65668b85-5c1c"
expires: Wed, 13 Dec 2023 09:32:34 GMT
cache-control: max-age=1209600
x-host: etl82.las.intern.weebly.net
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
via: 1.1 varnish
age: 573160
x-served-by: cache-bma1643-BMA
x-cache: HIT
x-cache-hits: 353
x-timer: S1701823514.238496,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Montserrat/regular.woff2
200 OK 13 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Montserrat/regular.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /fonts/Montserrat/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12708
server: nginx
content-type: font/woff2
last-modified: Mon, 04 Dec 2023 18:03:39 GMT
etag: "656e147b-31a4"
expires: Tue, 19 Dec 2023 12:24:24 GMT
cache-control: max-age=1209600
x-host: blu32.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 44450
x-served-by: cache-sjc1000136-SJC, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 28, 113
x-timer: S1701823514.264234,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Lato/light.woff2
200 OK 23 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Lato/light.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /fonts/Lato/light.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23236
server: nginx
content-type: font/woff2
last-modified: Sun, 03 Dec 2023 22:22:42 GMT
etag: "656cffb2-5ac4"
expires: Mon, 18 Dec 2023 16:12:57 GMT
cache-control: max-age=1209600
x-host: blu87.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 117136
x-served-by: cache-sjc1000143-SJC, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 68, 73
x-timer: S1701823514.267495,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Lora/regular.woff2
200 OK 19 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Lora/regular.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 19228, version 1.0\012- data
Hash 4de1acb111366ff5358a27c36bfff049
3e746862c43c9bf6080efa2e67985c6017013db1
df02979a78c233d4f94e6fabbf5620b730e3689c7492feb68506836d0d71417f
GET /fonts/Lora/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19228
server: nginx
content-type: font/woff2
last-modified: Sun, 03 Dec 2023 22:22:42 GMT
etag: "656cffb2-4b1c"
expires: Mon, 18 Dec 2023 11:49:30 GMT
cache-control: max-age=1209600
x-host: blu41.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 132943
x-served-by: cache-sjc1000119-SJC, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 31, 11
x-timer: S1701823514.267513,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Montserrat/bold.woff2
200 OK 13 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Montserrat/bold.woff2
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 12848, version 1.0\012- data
Hash f0b3206d02a2f684530117ce1d7e8ce0
f3708b707b65e241b0f1c819d5f7bf7da8412653
f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da
GET /fonts/Montserrat/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12848
server: nginx
content-type: font/woff2
last-modified: Wed, 22 Nov 2023 21:22:38 GMT
etag: "655e711e-3230"
expires: Mon, 11 Dec 2023 13:45:41 GMT
cache-control: max-age=1209600
x-host: blu93.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 730772
x-served-by: cache-sjc10033-SJC, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 40, 664
x-timer: S1701823514.267697,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/background-images/23369491.webp
200 OK 8.6 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/background-images/23369491.webp
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x575, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bb624cb01ca11a44ce16098c3bb854ea
de16fc6e9c003507ae73d497c951146f2ac0352d
6809fc0f65caa7c4bab3e59dc041c3870bf88db5f897c6f116ec7166bc1dc131
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/background-images/23369491.webp HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:14 GMT
Content-Type: image/webp
Content-Length: 8626
Connection: keep-alive
Last-Modified: Wed, 10 May 2023 05:18:49 GMT
x-rgw-object-type: Normal
ETag: "bb624cb01ca11a44ce16098c3bb854ea"
x-amz-request-id: tx000003c913c2453c2d179-00656f7fbb-db1eedd-sfo1
X-Storage-Bucket: z6809
X-Storage-Object: 6809fc0f65caa7c4bab3e59dc041c3870bf88db5f897c6f116ec7166bc1dc131
X-Host: blu120.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/files/theme/images/light-search.png?1684576668
200 OK 2.5 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/files/theme/images/light-search.png?1684576668
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 0385e87dc36e876e93a5e665b4abab0b
0ff1bba70bb206d9d5ad7ffa9cfd1541ca6c008d
db5e983ba9a806c4938e523c82742c28bdd9c15174a1dd64544c74dd1600d83d
GET /files/theme/images/light-search.png?1684576668 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/files/main_style.css?1684576668
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:14 GMT
Content-Type: image/png; charset=binary
Content-Length: 2477
Connection: keep-alive
Last-Modified: Mon, 28 Mar 2022 09:26:37 GMT
x-rgw-object-type: Normal
ETag: "0385e87dc36e876e93a5e665b4abab0b"
x-amz-request-id: tx000000000000001ad3316-0062847804-b9fbc20-sfo1
X-Storage-Bucket: zdb5e
X-Storage-Object: db5e983ba9a806c4938e523c82742c28bdd9c15174a1dd64544c74dd1600d83d
X-Host: blu78.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/background-images/325280644.png
200 OK 5.9 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/background-images/325280644.png
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 1893 x 183, 8-bit colormap, non-interlaced\012- data
Hash f111a3f017023b547adf5423f7f805a7
5b3073ba9f70aa54c26bbb2e940914a176f156a3
499ec3d0168a3c69274123643e30a86e36dc8d874dc8edb5e48270266dcd4f01
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/background-images/325280644.png HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:14 GMT
Content-Type: image/png
Content-Length: 5899
Connection: keep-alive
Last-Modified: Mon, 06 Jun 2022 05:47:11 GMT
x-rgw-object-type: Normal
ETag: "f111a3f017023b547adf5423f7f805a7"
x-amz-request-id: tx00000886a4ff655a85693-00656b731f-db1a051-sfo1
X-Storage-Bucket: z499e
X-Storage-Object: 499ec3d0168a3c69274123643e30a86e36dc8d874dc8edb5e48270266dcd4f01
X-Host: blu82.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/files/theme/custom.js?1573850854
200 OK 2.6 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/files/theme/custom.js?1573850854
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
Hash 167b5f2a55a6ac2775d799bf9a87343d
d62748afc0290b4cc7c63f0eb9911cad2239f94e
a16df105a4c2f66f83e36051a5d4b3e7399fadc9046f779b7f373a5dc46b2361
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /files/theme/custom.js?1573850854 HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 10 May 2022 00:14:12 GMT
x-rgw-object-type: Normal
ETag: W/"167b5f2a55a6ac2775d799bf9a87343d"
x-amz-request-id: tx000000000000001b32fb7-0062847d6b-b9fbc20-sfo1
X-Storage-Bucket: za16d
X-Storage-Object: a16df105a4c2f66f83e36051a5d4b3e7399fadc9046f779b7f373a5dc46b2361
X-Host: blu155.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL GET HTTP/3 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2512)
Hash 99bbe560926e583b8e99036251deb783
8d81b73ae06f664f9d9e53dd5829a799bf434491
648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25752
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:01 GMT
etag: "655e8689-124fe"
expires: Thu, 07 Dec 2023 08:49:33 GMT
cache-control: max-age=1209600
x-host: blu145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 1094141
x-served-by: cache-sjc10061-SJC, cache-bma1648-BMA
x-cache: HIT, HIT
x-cache-hits: 52, 4079
x-timer: S1701823515.715686,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/images/old/slideshow/control_icons.gif
200 OK 187 B URL GET HTTP/3 cdn2.editmysite.com/images/old/slideshow/control_icons.gif
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type GIF image data, version 89a, 25 x 13\012- data
Hash 88041de02e278ceedcd7de52bcdb8156
775bf1f3464e006b3f644512e52477ecc9385222
00bd643d7b1cd928b72aa4b6d69df8d5838a8f07e26294fda69ab365fa454c3f
GET /images/old/slideshow/control_icons.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1691794563
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 187
x-guploader-uploadid: ABPtcPphYUCa2GF6ns3D5fNOQsuDNGjLy73XCJHu1Pu3_BRFyMJIwG1_CBrgZk4F513HwB140rxoRyjqe8RIF62OFkJDxcgJDwkr
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 03 Nov 2023 04:30:31 GMT
last-modified: Thu, 25 May 2017 18:53:05 GMT
etag: "88041de02e278ceedcd7de52bcdb8156"
x-goog-generation: 1495738385881388
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 187
content-type: image/gif
x-goog-hash: crc32c=P9yuOw==, md5=iAQd4C4njO7c195SvNuBVg==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
via: 1.1 varnish
age: 245171
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 34
x-timer: S1701823515.746265,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/images/old/loading.gif
200 OK 3.0 kB URL GET HTTP/3 cdn2.editmysite.com/images/old/loading.gif
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type GIF image data, version 89a, 30 x 30\012- data
Hash 0b0212ec4e07451700c88a335ebba854
e62e40bbd31145dc64c0a555991a5dc5696d1943
37f5bf015ade9651005d72bcfdbb48838014c1c357f848585df731bc7eaff120
GET /images/old/loading.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1691794563
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2964
x-guploader-uploadid: ABPtcPo6UW07iAuZmhLypAAZPiQTx1XN6v4cbpLpEfcW9P9y6XIW0Zyf0bzrmAJFc7cSokwcOPV-XVY2IyHiAMGUyjoHR_F0zZfi
cache-control: public, max-age=86400, s-maxage=259200
expires: Sat, 28 Oct 2023 22:54:25 GMT
last-modified: Thu, 25 May 2017 18:45:50 GMT
etag: "0b0212ec4e07451700c88a335ebba854"
x-goog-generation: 1495737950396999
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2964
content-type: image/gif
x-goog-hash: crc32c=F+8alw==, md5=CwIS7E4HRRcAyIozXruoVA==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
via: 1.1 varnish
age: 178924
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 217
x-timer: S1701823515.768289,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1701815261
200 OK 886 B URL GET HTTP/3 cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1701815261
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2632)
Hash b09e83d2aeac55c0d3b67186cd5009ff
fa87cec84cc36fc2e70804867da24578ea331999
251a983a1b4b2cc76542aa398ae6b3499978a788860b54a8081d35d7a843303c
GET /css/free-footer-v3.css?buildtime=1701815261 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 886
server: nginx
content-type: text/css
last-modified: Tue, 05 Dec 2023 17:25:55 GMT
etag: "656f5d23-a49"
expires: Tue, 19 Dec 2023 22:29:37 GMT
cache-control: max-age=1209600
x-host: blu56.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 06 Dec 2023 00:45:14 GMT
age: 8137
x-served-by: cache-sjc1000115-SJC, cache-bma1648-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 8
x-timer: S1701823515.780105,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.google.com/recaptcha/api.js?_=1701823520710
200 OK 1.0 kB URL GET HTTP/2 www.google.com/recaptcha/api.js?_=1701823520710
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type gzip compressed data\012- data
Hash 799658d5bc31d0e6877de0c11fe03889
bf46e2640afebf01fb7a9a84fc4004d06efecdcb
db655a5292e5fbdea0e3df598a6b85ac59f7244521b8351a546dfc9a1121d0ad
GET /recaptcha/api.js?_=1701823520710 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 06 Dec 2023 00:45:14 GMT
date: Wed, 06 Dec 2023 00:45:14 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/img-8848_orig.webp
200 OK 11 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/img-8848_orig.webp
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 436x405, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2b1d6322ff6769f94a667b77b8fec7f0
87195f3d1ed4d0782dc5b3a3aa71d6cca3ee7bbf
9f2ad68fea89c46bd72c99bbb4322b19e5778669607f6f1ce8736876256f37b0
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/img-8848_orig.webp HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:14 GMT
Content-Type: image/webp
Content-Length: 11428
Connection: keep-alive
Last-Modified: Tue, 09 May 2023 11:05:46 GMT
x-rgw-object-type: Normal
ETag: "2b1d6322ff6769f94a667b77b8fec7f0"
x-amz-request-id: tx00000631d73b2b8b97701-00656f86e2-db1a051-sfo1
X-Storage-Bucket: z9f2a
X-Storage-Object: 9f2ad68fea89c46bd72c99bbb4322b19e5778669607f6f1ce8736876256f37b0
X-Host: grn39.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/supey-bt-2_orig.jpg
200 OK 31 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/uploads/1/4/5/8/145806651/supey-bt-2_orig.jpg
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 361x251, components 3\012- data
Hash abbe09e59137eb802fa7081290b51455
bdf15d2553dd9895c93e73e28ced1d6abf15c8d1
9ebaef7505c0a1a8b9064906d2c80132012d0dc903a097c0c2afc3418a9c3ed2
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /uploads/1/4/5/8/145806651/supey-bt-2_orig.jpg HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:14 GMT
Content-Type: image/jpeg
Content-Length: 31212
Connection: keep-alive
Last-Modified: Sat, 20 May 2023 09:54:28 GMT
x-rgw-object-type: Normal
ETag: "abbe09e59137eb802fa7081290b51455"
x-amz-request-id: tx0000056db79bbeabdc408-00656f802e-e4e0628-sfo1
X-Storage-Bucket: z9eba
X-Storage-Object: 9ebaef7505c0a1a8b9064906d2c80132012d0dc903a097c0c2afc3418a9c3ed2
X-Host: blu47.sf2p.intern.weebly.net
Accept-Ranges: bytes
rgtihjeg8qo3tu4.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL POST HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
Analyzer Verdict Alert OpenPhish phishing BT Group plc
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 06 Dec 2023 00:45:14 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn135.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=63
Connection: Keep-Alive
Content-Type: application/json
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rgtihjeg8qo3tu4.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 00:45:10 GMT
expires: Thu, 05 Dec 2024 00:45:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 5
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rgtihjeg8qo3tu4.weebly.com/favicon.ico
200 OK 4.3 kB URL GET HTTP/1.1 rgtihjeg8qo3tu4.weebly.com/favicon.ico
IP
Requested by https://rgtihjeg8qo3tu4.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
Analyzer Verdict Alert OpenPhish phishing BT Group plc
GET /favicon.ico HTTP/1.1
Host: rgtihjeg8qo3tu4.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rgtihjeg8qo3tu4.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 00:45:15 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000001b53b91-00628478b7-b9fbc29-sfo1
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: blu22.sf2p.intern.weebly.net
Accept-Ranges: bytes
199.34.228.53
0.0.0.0