r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2586
Expires: Fri, 13 Jan 2023 04:30:48 GMT
Date: Fri, 13 Jan 2023 03:47:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4826412809ac0196f13ac1ef44e357e5
793c81d2f90cfaa245dc89fc7a6090cbee846b26
11be07342f3aa4e059ddc3149337895d55bc71e30ad045dc72e4cca4be4c6951
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11BE07342F3AA4E059DDC3149337895D55BC71E30AD045DC72E4CCA4BE4C6951"
Last-Modified: Wed, 11 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2785
Expires: Fri, 13 Jan 2023 04:34:07 GMT
Date: Fri, 13 Jan 2023 03:47:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 02:48:49 GMT
content-type: application/json
age: 3533
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5517
Expires: Fri, 13 Jan 2023 05:19:39 GMT
Date: Fri, 13 Jan 2023 03:47:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HZTqte8PXW0e+yKgAZiCE0iunfVpw2yvbzIWyr0pJG9A3Xt3Q1+sq4Wag/sZji06fILl1H2LDcY=
x-amz-request-id: 82113GT8PE04MGZQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 03:02:46 GMT
age: 2696
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
shareteanationalcity.com/
302 Found 374 B URL HTTP/1.1 shareteanationalcity.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ccb7e61782a73a5b18ebef7e16ea6edd
e4267601cf2fb6ddacc8ddba92beaf509b943d39
a6af92ff060b40c17e5bd68db0c0857118d39aea59305d0363f84128e7a97906
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 03:47:42 GMT
Location: https://shareteanationalcity.com
Set-Cookie: publishedsite-xsrf=eyJpdiI6Im50VDFicnRnRGk1dHJMRkt4YTNBZ1E9PSIsInZhbHVlIjoiSzVkUVFzWWZESENETW9IdzNoRzZsaDNyTnFxRzN3eXhabllnVFUrZ3JGaVR3c1JZdzBsSXRUYzVKdVN1dGdmWXJkRTlPRk5jZTBsWStQaXZUc29WTWFxYXRKWkY0aUluTFAyZm90SDdYMDBEc3NEM3d2cUJ3a1FjS25HdVwvRVNGIiwibWFjIjoiZDMzNjMwNGUzYmE5MGQzZTM3NjMzMzgyZDYwYzYxYjJhMWE4ZDdlNWM3MjZhNmRlODA2ZmYwNmI1MjVmMTRiYyJ9; expires=Fri, 27-Jan-2023 03:47:42 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6InJ4c1c3b2IyZEQ0WmVrSURpYXpmK2c9PSIsInZhbHVlIjoiOXJ2UStYUWo2TzRrQWFUQXZ3eDNnaGdxV2VDdUZzQWRMRVVrQWR1WHVrZVwvbzhpd1FteElFckY4OGFsYmQzWnB1YUNGcFZOYU0wbDRrK0daQWxVdHlGT1o3RFhIaW5heUhGOXR4ODdETk9tK3JJUUZlMFwveGVmMW5RSWRNdGttdiIsIm1hYyI6IjEzOTk0ZTQ1MTRhMTNjYjNjNTgzODhjNjk2M2QxMThlMThiODdhNjUzOTMzNTk1NTBmN2NhMzhhZDg5YTcxMGMifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:42 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6InNuNWphaXZhQXVcLzhBeXJ0ZlRNT1d3PT0iLCJ2YWx1ZSI6InpqbUVxQXVcL0p4aTJrdEZQclNvcVRrUHVRSVU3SHZySm0ranltWUxWRnRBRWFzSkZoN3pUdFFFNll5aDl0XC9JOXhndm0yZThTZ0RXUU9EaWxoNDhnd0N0Wnd5YnA4NjFCRUJUYUg0ekN0XC9STU5JNHpJUWlkRWNMZFFBVWtVVWxSIiwibWFjIjoiNmY4MWZhMjVhNDQ3ODc2NmU1ODAyM2Y3ZWU2NmZiYjQ1YzNhOGQ0ZTI1NTgyZDliNTkxM2UwNDVkNDgwMTk4MyJ9; expires=Fri, 27-Jan-2023 03:47:42 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn127.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 3728afa7019d0759816c402d4d79aece
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 03:47:42 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 03:33:45 GMT
age: 838
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 099c394193dd3ed84c46f586126a1351
9f6158cd83a4c78ba0fce3ee90f3bfa810d72186
5e135e0d54076dbf39b4bd4a3e1ae204ec847d900cba8c547cba7d169bcfb62b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E135E0D54076DBF39B4BD4A3E1AE204EC847D900CBA8C547CBA7D169BCFB62B"
Last-Modified: Wed, 11 Jan 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 13 Jan 2023 09:47:43 GMT
Date: Fri, 13 Jan 2023 03:47:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 1362750c01a8e1a2db32aa73ae46a48d
a423b43f2bd52bd4ec38b760a674866a1294c5ad
f0f57e27c4ec8f1cd8e05f530edc37fb1e4a94ffe92e5729939998346f2e204f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4405
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:43 GMT
Last-Modified: Fri, 13 Jan 2023 02:34:18 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
shareteanationalcity.com/
301 Moved Permanently 390 B URL HTTP/1.1 shareteanationalcity.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e27b88747f44d9d85f8880530a3b173d
68ad770f461f819e096bd4b8c78542fb1d907d79
6c7e22a20ee0f57bbe64643efa64184a9c2486980b6d52b09860fe36eec603fe
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 13 Jan 2023 03:47:43 GMT
Location: https://www.shareteanationalcity.com
Set-Cookie: publishedsite-xsrf=eyJpdiI6IldmRzRhbWdZM3UrTkhXUlpTaGlxMlE9PSIsInZhbHVlIjoiQUl1cVpESWl5T21NWmZBQld6R1RwU3BqS2JZRXIwQzBCczV5SnFZbFYrOTk1Q3M4QTRpVWRyV0pCcTRRTHhuQ3B5Tk96dG5aZGY0U3UxVEZvN0hmYWxHSndzamVNRGxcL3FwTGVSZVBzXC9XSnBVQkFCaEpsNnB6b0NrSXlVRUxDTSIsIm1hYyI6ImJhN2ExYzRhY2U0MzY5Zjc1MjBiMmY4YjUzYzA3ZWVhZmZkMTAyNmY0MTgxOTUxNmYwZWVhOTRhZmNmNzI4NWEifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:43 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Ikt0NitzYVV5T2g4WUc5cFhyWmRoRGc9PSIsInZhbHVlIjoiK25jWnpIRXA5QmFhWTJFTUN2R20xVUNOTis5dCtyZ1FLUmdpUGI4YlpSbkgwcmxQcFYxRHpVSHZoRTdvYmN3N0JNUENlVEpBSVVBQVNZM0FEWmxLVktZYW9BdFpaa0hFWm1lTzc4RGxHXC9VcXczTzlpMUFRSFlZUFByTUhsbTJpIiwibWFjIjoiNDdiN2NmZTJhZThiNTg1NmNmZWY3YmZkZGFkOTdmNTUyYTRjZWFlNzVlNmY2M2FlODljYzkyZDZkMTRlNGEyYSJ9; expires=Fri, 27-Jan-2023 03:47:43 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6IlVWWXJ4SVZudmRjY09OWkxBTXBLY3c9PSIsInZhbHVlIjoiQzFYenRJYjFMXC9zREE3cnpOa3JTbjEwSzBVa3FuZExweGtBNWVuSWlsNWd3REhEXC9oZ2NlQUdGS2FVdEJcL1FONldSTnExdmtwN0ljYm0zdVNjakFPVHRBVUlNM2JCNGswZndlcm5seXFwNnhDQStVd0duajJcL3FwQ2ZRa0JNOEtnIiwibWFjIjoiYzliMGJhNzliNzhiNjk5MDk5YTQzZjVhN2Y5OTc0MzU0ZWVkMDQzZTAxYTg5NjZhMmM3MGVmMzNkMThlMjY0OCJ9; expires=Fri, 27-Jan-2023 03:47:43 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn147.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: d4a7f0201e6f63127b59446a8f1329cb
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K6G6CWFN5e5Bh/FEqaYuGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hvR0rHOBLib3Wvp1L6HAKYMLT2I=
www.shareteanationalcity.com/
200 OK 13 kB URL HTTP/1.1 www.shareteanationalcity.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (35454)
Hash ed4448c7cf0a501db1bdd6158e319ed9
e80c5a84071e27af9b0dc3aa8c39723a0a91d22b
436883d1b136409e89eb75e5a81fb208aaa004ef7f2cef104a07cfb7c3abeb4f
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 03:47:44 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:44 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:44 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:44 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn127.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 7fade4f0f7ef5175601a54484059389f
Content-Encoding: gzip
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
IP
File type ASCII text, with very long lines (11882), with no line terminators
Hash 20a4e66f534b80396d40bbc4291b2172
d7c962996f2715d94483be2bf9b644c7185d7ec7
0f19e8ad1c9bd5ae2ae5141f31b4e491bb460558da0ac51cd402964e716880ac
GET /app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Mar 2022 18:09:33 GMT
x-rgw-object-type: Normal
etag: W/"40372ca3b0cfa19f4e5d664243108364"
x-amz-request-id: tx00000000000005ce1aaac-0062434bb9-a9f1ce7-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 273238
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1673581664.499345,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4998
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
200 OK 23 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
IP
File type Unicode text, UTF-8 text, with very long lines (64204), with no line terminators
Hash 5a08057dbd0b09fdcef375354aca0ada
3633aece56e4a03b6118cf199c40a4f4c6915faa
762c102d3386b3244effa9bfc21ef31dcb5d143732eb17041c0097c2d99f2b71
GET /app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Mon, 09 Jan 2023 17:22:21 GMT
x-rgw-object-type: Normal
etag: W/"651e92c6a8443e8f2e6ffaa794179cc0"
x-amz-request-id: tx00000000000005ad09296-0063bc4db0-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 262000
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1673581665.500861,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23362
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
200 OK 24 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
IP
File type Unicode text, UTF-8 text, with very long lines (64921), with no line terminators
Hash 8c60406ea590dcf69b9449935dd2a3e9
0f5f05bb816318e9c296a5dfb0722d26d070a3fe
c491b43fcc54355cbad50b9e3f7669ffeca7be6fac1e833feb0a4b7aa9bcc82f
GET /app/website/css/site.973ddc22f8694b15d85e.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Fri, 06 Jan 2023 17:22:54 GMT
x-rgw-object-type: Normal
etag: W/"8b3c9559c02b85f1e4036133d13c07f7"
x-amz-request-id: tx000000000000058a1ba38-0063b8595a-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 21a345688c10c921dba7a437bb0211486ebff07d
x-request-id: d265bba703ee0368a2bf7d3826c11b81
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 555744
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1673581665.502451,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24139
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.dcd4cf774cb647eba251.js
200 OK 25 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/runtime.dcd4cf774cb647eba251.js
IP
File type ASCII text, with very long lines (51802)
Hash b733f746b1532a950a96d38256ae0ff1
4e4d17ff09b142055dd515a7d485cc587d8bf524
60e37cc354c3cbf297533357b78fd22a1218742fb57e4897d7d2904364a7a9bf
GET /app/website/js/runtime.dcd4cf774cb647eba251.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 19:36:59 GMT
x-rgw-object-type: Normal
etag: W/"2b2b98a7a2c003f4df2ef89398dec8f8"
x-amz-request-id: tx00000000000005c625ff7-0063c061ac-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.dcd4cf774cb647eba251.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2258019346dfbeb37ac14295d7775252881e5e0b
x-request-id: 23ec7117a239caf40e6056069a48515e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 29273
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1673581665.504258,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25402
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 04 Jan 2023 19:27:59 GMT
etag: "63b5d33f-124fe"
expires: Thu, 19 Jan 2023 08:38:42 GMT
cache-control: max-age=1209600
x-host: grn114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
age: 673742
x-served-by: cache-sjc10061-SJC, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 7731
x-timer: S1673581665.506082,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/languages/en.41603737f0499bd961b0.js
200 OK 154 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.41603737f0499bd961b0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 154 kB (153542 bytes)
Hash f17460586f44d577fb3f63df262f8819
22ecdb4c1e159f26a031abe344ec2bb5ba9f6442
b788b7794d74b7e011607d8d3d0bd85b5b0e46ecc77f13fa626e762e2adfb48c
GET /app/website/js/languages/en.41603737f0499bd961b0.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 19:36:59 GMT
x-rgw-object-type: Normal
etag: W/"366756c7072b4495ba03228b4ef9cb1e"
x-amz-request-id: tx00000000000005c2a9aff-0063c061b8-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.41603737f0499bd961b0.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2258019346dfbeb37ac14295d7775252881e5e0b
x-request-id: 5495887ad6eefdcd5e795bb68cb8378e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 29273
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673581665.505957,VS0,VE5
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 153542
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.e658beb7abe224bd5952e3b47fba2434.js
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.e658beb7abe224bd5952e3b47fba2434.js
IP
File type JSON data\012- , ASCII text, with very long lines (16859), with no line terminators
Hash 39df3bc1127989a56bd69781a4c9a36f
3933bb848cc71f080d2a08d5db545a46c0d04a21
f3826a540a1b4d3f3a5a9c6436d3996078f0e1515ba702a55eb318bbaa361e26
GET /app/checkout/assets/checkout/imports.en.e658beb7abe224bd5952e3b47fba2434.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shareteanationalcity.com/
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 21:44:02 GMT
x-rgw-object-type: Normal
etag: W/"e658beb7abe224bd5952e3b47fba2434"
x-amz-request-id: tx00000000000005dafdea6-0063c07f7f-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/imports.en.e658beb7abe224bd5952e3b47fba2434.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 21548
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673581665.715251,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3589
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
200 OK 325 B URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
IP
File type JSON data\012- , ASCII text, with very long lines (1611), with no line terminators
Hash be5c6eec9cf3e92f8df759e392e01209
e0bff726136f738e6a1fe3e991d9a64dcf46d23a
e630015425b5298e0f7db7e397850913ea94d317beba50978a9df8e8364334ae
GET /app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shareteanationalcity.com/
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json
last-modified: Wed, 04 Jan 2023 20:55:19 GMT
etag: W/"63b5e7b7-64b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 705094
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673581665.715398,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 325
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6546
Expires: Fri, 13 Jan 2023 05:36:50 GMT
Date: Fri, 13 Jan 2023 03:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6546
Expires: Fri, 13 Jan 2023 05:36:50 GMT
Date: Fri, 13 Jan 2023 03:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6546
Expires: Fri, 13 Jan 2023 05:36:50 GMT
Date: Fri, 13 Jan 2023 03:47:44 GMT
Connection: keep-alive
cdn3.editmysite.com/app/website/js/site.6ad870b2d5fa2e0bbdfd.js
200 OK 9.7 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/site.6ad870b2d5fa2e0bbdfd.js
IP
Hash e514f1b711f68a1699f9d0d269ca9a8a
71621fabcc4ae2a8c3180e22e63fac1217c4032f
cc10cadc4477cc6faa1973343b9019b1b4bc94e5ec9fab114a4b755f24872f35
GET /app/website/js/site.6ad870b2d5fa2e0bbdfd.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 15:57:40 GMT
x-rgw-object-type: Normal
etag: W/"e3c6ccd4a8684299a2a3af17aa818ca7"
x-amz-request-id: tx00000000000005c3a939c-0063c02e4f-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.6ad870b2d5fa2e0bbdfd.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f02741f27cd4d4dcf57981921361cbdfa9e227a2
x-request-id: 039bfb0d0d41f170ee7aa4cbbab1ccef
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 42408
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673581665.505794,VS0,VE9
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 642806
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JRzc2Mcl4EasyH6_1kFh7sr-57f1HNDu-YN8YptDe_kcTET9x8P9LA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 14:00:13 GMT
age: 49651
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c276d1876bfcc6ec4dfb94bcdd2f6c8
177a80d7d4d3fc273a712cada41abdd87b138a6c
abceeefeec2fc658e285a2898e38a36643501bfa1d66f33e216f100e456a8c06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8785
x-amzn-requestid: 4844b27a-1080-4d95-9a35-c8ab7cdd9acb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph7sEajoAMF_gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d17-2520efc6579a4fbc25cdb515;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RKH9tjX9MxE-NWDVWa4KZqrXKnzx-2200m_vm18DyYeWII0U6NgsVA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:00:02 GMT
etag: "177a80d7d4d3fc273a712cada41abdd87b138a6c"
content-type: image/jpeg
age: 20862
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F193388df-66d1-4b0b-a76a-1bceb229f97d.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F193388df-66d1-4b0b-a76a-1bceb229f97d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d51665a3de125668caaa8dd7b0a000d6
87b5fbde66fefcbaaf29819989564963066c6fbc
2c0feea5fbcdad197412b0c07f9caf933685e7e023b3e84df7f92e021331c48d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F193388df-66d1-4b0b-a76a-1bceb229f97d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9771
x-amzn-requestid: 3c3eac1d-07c9-4755-bbae-a2c0b2b50183
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph7iFzwoAMF8Fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d16-30bcb44a7d99a0295b0aee70;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iauWiLHJBG7KGhoiBTKUr-KFr4ROM_RBtfo0_H734iHClgwtubB99A==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:02:02 GMT
age: 20742
etag: "87b5fbde66fefcbaaf29819989564963066c6fbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a1d7358529d4222d3bfcf48e5f77debd
8c9af0bb2a4a11e6e2c7b749d560d4ec50102a21
07df2ae85dfd4a633b18cdf8c82d29247fe451e8e6ba2d784d75770109c5448e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6673
x-amzn-requestid: ed07bce8-c0a0-43f0-96b9-18db35b7b5f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ7G3hoAMFVbQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-11afc3391dcc43051b5e2a5f;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q8SVMum-mVV5InuAQ5aq8L8RMH6qlly3gHmI7Jwp-r_Z8RZiwG_IDQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 18:56:04 GMT
age: 31900
etag: "8c9af0bb2a4a11e6e2c7b749d560d4ec50102a21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51f29fa68742d72a5ad8ad54a973424d
4941e01c8718adfe7ce13d551e80549236e561df
83b4e946e058ae662e559703f64896ce4c5de969045cf8e3e00806297eab0007
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6895
x-amzn-requestid: 9367b7b5-6904-4308-85ca-69231b2d6fc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eXnqzFBlIAMFcQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b95311-5774375508659511014974c0;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 11:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iVPiVZnh-zRlIEguoiOssDfs0bg74oM1nZyUNfY5XqRIsE_KArUZhA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 21:46:34 GMT
age: 21670
etag: "4941e01c8718adfe7ce13d551e80549236e561df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash 05c4ec123c8699b77c56c32215b3c6d1
7b9d5ef1027d7d460a9cd3cd3f9dd2df25681e8f
f17b8026ac6579cfe60c98a580b9b3388d3bbf7cd6e72ffc53bb43b710b7a34b
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:44 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1BF14E51C45E1C7F12F0C3208A783743F2A7D0AA"
Expires: Fri, 13 Jan 2023 15:00:00 UTC
Last-Modified: Fri, 13 Jan 2023 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 788b26fc7dd01c0e-OSL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash e4249a7f1b5390e1ad889eeeae4eb09e
d0e787254c0b69ec7282037c2cd27c2bd3728554
430c00118dad92ef4db2594922165c21cdc697274f2bb4eb0ae5460c2c50caa7
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:44 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1BF14E51C45E1C7F12F0C3208A783743F2A7D0AA"
Expires: Fri, 13 Jan 2023 15:00:00 UTC
Last-Modified: Fri, 13 Jan 2023 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 788b26fc7c460b3d-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash daa9515d00c2cfc6b292efac35dd939c
de78b8e0109137a1e62f1bcee5ac308415f1688f
b5f87412a58db08b4751ffdb7430acd2868d4ac21fcae551b340cafdc3b516d6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142956
Date: Fri, 13 Jan 2023 03:47:45 GMT
Etag: "63c046ae-1d7"
Expires: Sat, 14 Jan 2023 19:30:21 GMT
Last-Modified: Thu, 12 Jan 2023 17:43:10 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ill0CVL9DZsT7aFdSbfaj7RsIuMlvPYj2OsjFHWixTQCo04NUArNZg==
Age: 6431
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash daa9515d00c2cfc6b292efac35dd939c
de78b8e0109137a1e62f1bcee5ac308415f1688f
b5f87412a58db08b4751ffdb7430acd2868d4ac21fcae551b340cafdc3b516d6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142173
Date: Fri, 13 Jan 2023 03:47:45 GMT
Etag: "63c046ae-1d7"
Expires: Sat, 14 Jan 2023 19:17:18 GMT
Last-Modified: Thu, 12 Jan 2023 17:43:10 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H52vum40mPF8rq3BOroH9Ao5wMjBdWJoHwd3zP0ciJPim6C2t_yU8g==
Age: 5648
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.shareteanationalcity.com/
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 03:47:45 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.shareteanationalcity.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
www.shareteanationalcity.com/uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/Sharetea%20Logo_1626402998.png?width=400
200 OK 11 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/Sharetea%20Logo_1626402998.png?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 504f162cf7826e6d8475e347ff2c4525
af199def354fbf044f18f2cc5cf2d71770516845
a6458f45f4ddfe80959a0e4f83d0eb1fc4dc8add4b999c79934c1ce04830a3ae
GET /uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/Sharetea%20Logo_1626402998.png?width=400 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: image/webp
Content-Length: 10578
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "ldBOThAg5AnQJD1IPPqDTVrK18w+KUj5o13WRiW8c8Y"
Fastly-Io-Info: ifsz=19325 idim=1012x216 ifmt=png ofsz=10578 odim=400x85 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx000000000000002ddbef1-0062855a05-b9fbc29-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z448b
X-Storage-Object: 448b6d6b4a8ecc3179685667f5f55e2036f34adf762b58efe8d7cf593a520a19
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10027-SJC, cache-pao17460-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673581665.431241,VS0,VE46
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu61.sf2p.intern.weebly.net
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1947
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 03:47:45 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=480cdb69-bb80-4036-9297-2bf564dc3a7b; Expires=Sat, 13 Jan 2024 03:47:45 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.shareteanationalcity.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shareteanationalcity.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.shareteanationalcity.com
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://www.shareteanationalcity.com
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
www.shareteanationalcity.com/static/icons/payment-methods/visa.svg
200 OK 2.2 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/visa.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1610)
Hash 98e2d557ac9311fbf6c47dcb9cb2c730
e58712545669ba118a42f2e47fcaaabd095cdc6c
0647e086fe11b0748687b68e25c9d2830b8fa08c4397c6c7c6e327d5e8e6c43d
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/visa.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: image/svg+xml
Content-Length: 2247
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 21:25:04 GMT
x-rgw-object-type: Normal
ETag: "98e2d557ac9311fbf6c47dcb9cb2c730"
x-amz-request-id: tx000000000000034345dca-00631274b0-c03521c-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn152.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: edf9e459edc13bd1e5251d35125e9b42
www.shareteanationalcity.com/static/icons/payment-methods/mastercard.svg
200 OK 1.7 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/mastercard.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (424)
Hash 1448577966d9c16095880130e876db7a
ecfaef0be795af04cab2f95d7457721a35cf1742
0b6808d0e93f753a1036f42b52c1a2616662d1503f8d07234a98ee54d7a3dd1e
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/mastercard.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: image/svg+xml
Content-Length: 1657
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:39 GMT
x-rgw-object-type: Normal
ETag: "1448577966d9c16095880130e876db7a"
x-amz-request-id: tx000000000000001a5c181-00628473f6-b9fbc77-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu140.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 71c371decc7fc14b9e22dd5bf0bb2492
www.shareteanationalcity.com/app/website/cms/api/v1/users/131248217/customers/coordinates
200 OK 70 B URL HTTP/1.1 www.shareteanationalcity.com/app/website/cms/api/v1/users/131248217/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0202fec5c18173b1ccef517d7a8fb076
ed3c42952ab998b5f8f4570735caccb08bbbfbba
a496539bedf56d084f7654fb244367daf638da6ab09f7812b81c743baa995e26
Analyzer Verdict Alert fortinet Phishing
GET /app/website/cms/api/v1/users/131248217/customers/coordinates HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ==
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 03:47:45 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9; expires=Fri, 27-Jan-2023 03:47:45 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6InI3aUdhWENyNmx6XC9Kc2RLOExZMThRPT0iLCJ2YWx1ZSI6IlNnZHV2TFJHWHEwRm1vODgxXC9Wa2dmY3ZZWTJ4MEVDWjdEZDBha0pMSWhFUlF2N2lrSjgyZjFmZlBUV21td2xaN0NUdENcL0podGdKbDRQdzR5NWJLY3k5SFhiUXMrR3o1VDkwY2xDUUE5YklKNjhiZ2tOZWxsYjZSYkFnR0d5Tk0iLCJtYWMiOiI3Yjk5NWM1MjdiZmJmZWFlMzRhYTQ2ZDFhYWFiZDljN2U4ZGU1MzU1NWE2MGFjZjE5NzU5MzViZmQzMDEzNTM1In0%3D; expires=Fri, 27-Jan-2023 03:47:45 GMT; Max-Age=1209600; path=/
X-Host: blu140.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 97af1889eac078e6e36dab43a8f1a5af
Content-Encoding: gzip
www.shareteanationalcity.com/static/icons/payment-methods/applepay.svg
200 OK 3.0 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/applepay.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2381)
Hash c9f0fd2c3c94b10595455b840e220672
7734e007c6a4dd650d38be5b29c7335cf9cbfb97
a1aedf64c61a6c121aa0e78164ad0d32f1ebbfd949197c88c7f48462bcbed3ab
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/applepay.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: image/svg+xml
Content-Length: 2986
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "c9f0fd2c3c94b10595455b840e220672"
x-amz-request-id: tx000000000000001aa71e4-00628473fa-b9fbc7f-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu146.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 2b5f4f0188b23ccdee61753b75c09f6a
www.shareteanationalcity.com/static/icons/payment-methods/googlepay.svg
200 OK 3.1 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/googlepay.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1581)
Hash 2e6b26f9d61dd22468981356313ca58c
df83a373e46337f409c59947b4ae5f9abe1d896a
85d63842ff30824d4324316344c9eea12995869cc3f5f353fbfa2c3008980222
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/googlepay.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:45 GMT
Content-Type: image/svg+xml
Content-Length: 3115
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "2e6b26f9d61dd22468981356313ca58c"
x-amz-request-id: tx000000000000001a8879f-00628473fc-b9fbc20-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu149.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: bb986f9befa85dbe844ed75173e064c6
www.shareteanationalcity.com/static/icons/payment-methods/americanexpress.svg
200 OK 1.2 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/americanexpress.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (955)
Hash 2d510915ad1e47e7f6fa0a9ca6dfe7d2
a94981dcae88d70869bce16df350fbc0fbc0c138
52c75baa1c05af510c5017a200f40094bba37a6ccbb2fe5ce2542f331b812204
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/americanexpress.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/svg+xml
Content-Length: 1206
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "2d510915ad1e47e7f6fa0a9ca6dfe7d2"
x-amz-request-id: tx000000000000001ac6a0d-00628473f9-b9fbc64-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn138.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 31131a3091a48f5fbceedaf49ef16ede
www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 1.3 kB URL HTTP/1.1 www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with very long lines (1273), with no line terminators
Hash f12390d6ad066f1ce4a36227b40a59c6
d54bae7058d2fd151cc71436e7f51af3359444b8
a2f141ab1991d508d75cee20dae1d5f643fd10d82ccadee0b358d75630f618eb
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ==
Content-Length: 78
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:45 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu93.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 1273
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ==
Content-Length: 83
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:45 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu73.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=57
Connection: Keep-Alive
Content-Type: application/json
www.shareteanationalcity.com/static/icons/payment-methods/jcb.svg
200 OK 3.9 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/jcb.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1131)
Hash 32a219b916e0f1667aa650f7f8536a7b
a464d7ae31f4996c69c95a11fb791b01e55ceba8
4e8f269a2bf9b6d132634125bfe865e6342103f4cbd7953951d16c3442a24216
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/jcb.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/svg+xml
Content-Length: 3876
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:39 GMT
x-rgw-object-type: Normal
ETag: "32a219b916e0f1667aa650f7f8536a7b"
x-amz-request-id: tx000000000000001a5c1f8-00628473f6-b9fbc77-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn138.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 41a0a0736067da4423ae0eb0fc41c638
www.shareteanationalcity.com/static/icons/payment-methods/discover.svg
200 OK 3.1 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/discover.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2151)
Hash 9e274d45e1f0b4185bb742d876cee3f5
67405429005f54a1cfb1a27e27491d89814f9ede
a9e66fbb3fb33098304147be606afc2b8e8c8f745db8a83bb6b2d7a0a9a42abc
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/discover.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/svg+xml
Content-Length: 3087
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "9e274d45e1f0b4185bb742d876cee3f5"
x-amz-request-id: tx000000000000001af99f3-00628473f6-b9fbc29-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu134.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: b1617fe7b48d9f4ea6c6d08febb5fb30
www.shareteanationalcity.com/static/icons/payment-methods/cashapp.svg
200 OK 1.4 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/cashapp.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1143)
Hash 4d9798d0983422b1931dbfb934e04144
b70cb2e3822c77177ba56a351e309d5394263105
880d2b790069e44a5ac9b19ea84372fb6289a1cddae239a7aea7d948fd9faa3a
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/cashapp.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IlFZWGhVTWR3dTUwTUwzblpiNlwvVHlRPT0iLCJ2YWx1ZSI6Im4zRGhlcGdITGhPNm12Nzd1Tmt6Rm1tbGZlYUdlN1RzSmdzY1NDMGdPdzZQZlY3cFlISG02NlpTbkQ1c0ZtOFJTejk2RUtXOGFndCtNWXA5c0FjZm8wYzdadU9cL2t4eE5BSzVCUmpkNjBBZ3B5V1p0Z0RFa2h3UkdMSUwxQmlqeiIsIm1hYyI6ImE5N2NhZjFlNDkyNzY2MmQ0NjQ0OWEzZmQ1M2NkN2FjYWM5ODFhZDA3ZWRkYjViZmJiODU4OGNjODYwNWJjMzgifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/svg+xml
Content-Length: 1394
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "4d9798d0983422b1931dbfb934e04144"
x-amz-request-id: tx00000000000000d90fb42-0062961508-b9fbc20-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn50.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: f16a9a2e097ff333dc0095b59aa1922d
www.shareteanationalcity.com/static/icons/payment-methods/afterpay.svg
200 OK 2.1 kB URL HTTP/1.1 www.shareteanationalcity.com/static/icons/payment-methods/afterpay.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (665)
Hash 260a26946c3308e835f83022e177e1aa
3ef5afcc903a2375bc686511214c5e9e535b2342
cb0d2b4c057e2dd0c0be626a3fc89c2fbfe23a8de627f2031d1c44de406ffc35
Analyzer Verdict Alert fortinet Phishing
GET /static/icons/payment-methods/afterpay.svg HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InI3aUdhWENyNmx6XC9Kc2RLOExZMThRPT0iLCJ2YWx1ZSI6IlNnZHV2TFJHWHEwRm1vODgxXC9Wa2dmY3ZZWTJ4MEVDWjdEZDBha0pMSWhFUlF2N2lrSjgyZjFmZlBUV21td2xaN0NUdENcL0podGdKbDRQdzR5NWJLY3k5SFhiUXMrR3o1VDkwY2xDUUE5YklKNjhiZ2tOZWxsYjZSYkFnR0d5Tk0iLCJtYWMiOiI3Yjk5NWM1MjdiZmJmZWFlMzRhYTQ2ZDFhYWFiZDljN2U4ZGU1MzU1NWE2MGFjZjE5NzU5MzViZmQzMDEzNTM1In0%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/svg+xml
Content-Length: 2148
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 18:10:38 GMT
x-rgw-object-type: Normal
ETag: "260a26946c3308e835f83022e177e1aa"
x-amz-request-id: tx000000000000001a88807-00628473fd-b9fbc20-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn133.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 8e10f93473a4ab91c76fbeb800d44baa
ocsp.digicert.com/
200 OK 471 B IP
Hash 01bf013eb8ca9eb863f72df293922686
7b0a719b931e667c338b45710fa38926ab03bac8
855f119e98f2efb3e8f9fdcdd1b23bb2bb9acd8789a74d6479d3e941b095a4ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4343
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:46 GMT
Last-Modified: Fri, 13 Jan 2023 02:35:23 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
cdn5.editmysite.com/app/store/api/v23/editor/users/131248217/sites/815741304722803922/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1
200 OK 1.8 kB URL HTTP/2 cdn5.editmysite.com/app/store/api/v23/editor/users/131248217/sites/815741304722803922/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1
IP
File type JSON data\012- , ASCII text, with very long lines (5718), with no line terminators
Hash 21e5edb17bd1fabfa3f62cc147a815b0
3b5e1da5c3d6cd37835072e455e117dfccde446a
a9acba28167b77d20d0598d2d05582a8132aca1d3d361a1872c50bfb45a7af2f
GET /app/store/api/v23/editor/users/131248217/sites/815741304722803922/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1 HTTP/1.1
Host: cdn5.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/json
cache-control: s-maxage=604800
etag: W/"44da2053b7169b05e162b1f744ec0ffb"
access-control-allow-methods: GET, HEAD
fullcache: m
x-revision: abf0a30399a93f045969de7538a543a302283424
x-request-id: ee86463926dc7723c261d8f28f9083c9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:46 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1673581666.172823,VS0,VE265
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1828
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2387
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: sp=480cdb69-bb80-4036-9297-2bf564dc3a7b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 03:47:46 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=480cdb69-bb80-4036-9297-2bf564dc3a7b; Expires=Sat, 13 Jan 2024 03:47:46 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.shareteanationalcity.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.shareteanationalcity.com/square.ico
200 OK 6.5 kB URL HTTP/1.1 www.shareteanationalcity.com/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /square.ico HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InI3aUdhWENyNmx6XC9Kc2RLOExZMThRPT0iLCJ2YWx1ZSI6IlNnZHV2TFJHWHEwRm1vODgxXC9Wa2dmY3ZZWTJ4MEVDWjdEZDBha0pMSWhFUlF2N2lrSjgyZjFmZlBUV21td2xaN0NUdENcL0podGdKbDRQdzR5NWJLY3k5SFhiUXMrR3o1VDkwY2xDUUE5YklKNjhiZ2tOZWxsYjZSYkFnR0d5Tk0iLCJtYWMiOiI3Yjk5NWM1MjdiZmJmZWFlMzRhYTQ2ZDFhYWFiZDljN2U4ZGU1MzU1NWE2MGFjZjE5NzU5MzViZmQzMDEzNTM1In0%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:46 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001aa728b-00628473fa-b9fbc7f-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu129.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 7ccfe060b954977e5f062f31431712b9
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=18193d63-1ed9-4e83-b2be-6ea6f426228e&batch_time=1673581650671
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=18193d63-1ed9-4e83-b2be-6ea6f426228e&batch_time=1673581650671
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cd1410461998dd52b938a72881372ea4
5278e828cade439b6e2667bdd8e292904987c75b
cfa4165a88b0e476f56a127bf685cac240d41055dd811a05461423ff1087d505
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=18193d63-1ed9-4e83-b2be-6ea6f426228e&batch_time=1673581650671 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16025
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 03:47:46 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.shareteanationalcity.com/site-icon?device=ios&size=180
200 OK 3.3 kB URL HTTP/1.1 www.shareteanationalcity.com/site-icon?device=ios&size=180
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash b0de4dab615e03ec83841cc1c67ae4c4
8aba5064ffd6e7a7e2e7f42dd7f1e2dd87643efa
aa76310ded7389b8d93ccc2407126076dc2923e635b1b0a0c6c71e281c50e384
GET /site-icon?device=ios&size=180 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImZkZ1FpQWFOWURNMVwvN0JDR1Bldk1RPT0iLCJ2YWx1ZSI6IjdmVWdyajJOVW9jaWloNVZNS21HYkdOMUxkVExRUTZlYVFFb1MrSVd1OHFaRkdPVW1sUmh4VHFhbFBuNytFaHJ0Vm1nMVFNK1ZldWZtWERZUGZ0ZGg0R0FLNG5cL0NyMXhUY1JuNHZIc3VQam5OSWo3MThEaWhSNXVGYzJLQnk1WiIsIm1hYyI6IjkzNTVjMWE3N2Y4ZDIzZWM2YTY5OTAwZmZmMzE0OWQ1NzQ3NTZlY2JmZjc1ZmNjNDNlNGVlODdkMWFkZmJjOGEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InI3aUdhWENyNmx6XC9Kc2RLOExZMThRPT0iLCJ2YWx1ZSI6IlNnZHV2TFJHWHEwRm1vODgxXC9Wa2dmY3ZZWTJ4MEVDWjdEZDBha0pMSWhFUlF2N2lrSjgyZjFmZlBUV21td2xaN0NUdENcL0podGdKbDRQdzR5NWJLY3k5SFhiUXMrR3o1VDkwY2xDUUE5YklKNjhiZ2tOZWxsYjZSYkFnR0d5Tk0iLCJtYWMiOiI3Yjk5NWM1MjdiZmJmZWFlMzRhYTQ2ZDFhYWFiZDljN2U4ZGU1MzU1NWE2MGFjZjE5NzU5MzViZmQzMDEzNTM1In0%3D; PublishedSiteSession=eyJpdiI6ImRjVTVKOVwvN2RUUjJSdElOWHNjWG53PT0iLCJ2YWx1ZSI6IkthQ1wvc0xsdlhETEVCUFE4Q2tCaFpFcGtEclljUE0zbHJmTk5cL1E2cXRPdmhuMUhEejgyaGd3R3Mzd21nM1dlQ1dKM2I4ZGxIQnNcL1EybTVJUGpyK0dNc2R4Y1NBZG5XeDI4WU5tMWdVM1hMUlwvdVFoOXdRMXZBZFNMYnQzS21taCIsIm1hYyI6IjM1MTdlOTlkYjhjYmI1OGZlMTAyNWY2MGYxZDI5YTY0OTFhNWMxODk1YWU4MmYzOWQ5ZmU5MGI1MmY5NWM3Y2UifQ%3D%3D; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581649.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 03:47:46 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:46 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0%3D; expires=Fri, 27-Jan-2023 03:47:46 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; expires=Fri, 27-Jan-2023 03:47:46 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn80.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 1414895315d8e090c0072bb46539eb28
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1846
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: sp=480cdb69-bb80-4036-9297-2bf564dc3a7b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 03:47:46 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=480cdb69-bb80-4036-9297-2bf564dc3a7b; Expires=Sat, 13 Jan 2024 03:47:46 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.shareteanationalcity.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=d813b841-c3ca-4c81-a23a-1d01256240b7&batch_time=1673581651528
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=d813b841-c3ca-4c81-a23a-1d01256240b7&batch_time=1673581651528
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2055103980b7b5d01054a279f43136cf
99a13c1a7387efb3bbda74cf5e4a0a8b22b229f4
8a818f1b10c772e4619955e4a29babb2c09a1b5ac106fe708414415b54ed07bd
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=d813b841-c3ca-4c81-a23a-1d01256240b7&batch_time=1673581651528 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16294
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 03:47:47 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ad134436-fa7c-449b-81b0-5292b6806d0b&batch_time=1673581651760
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ad134436-fa7c-449b-81b0-5292b6806d0b&batch_time=1673581651760
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fe691f7fb3f369dc61784e54fa104fb5
b4f86892c6c4446bb2a440c7e63526897ab46caa
0c5fdfd1ed1ee4d8db556d7792d30a6cae0c4a450455d31aa1f12fa5ea38dc81
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ad134436-fa7c-449b-81b0-5292b6806d0b&batch_time=1673581651760 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15810
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 03:47:47 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0=
Content-Length: 89
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:47 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu149.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=67
Connection: Keep-Alive
Content-Type: application/json
www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 79 B URL HTTP/1.1 www.shareteanationalcity.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0=
Content-Length: 77
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:47 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu124.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
www.shareteanationalcity.com/app/website/cms/api/v1/users/131248217/customers/locale
200 OK 36 B URL HTTP/1.1 www.shareteanationalcity.com/app/website/cms/api/v1/users/131248217/customers/locale
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84d8976e69ede075d29893d5a4edb32e
0d93241406b90b37202e0a9a4547159983e58a0d
4b3b556e9891c1d9bd2d7722fd46a43822113e738daf981ab4972a6bc18cea53
Analyzer Verdict Alert fortinet Phishing
GET /app/website/cms/api/v1/users/131248217/customers/locale HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0=
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 03:47:48 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D; expires=Fri, 27-Jan-2023 03:47:48 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; expires=Fri, 27-Jan-2023 03:47:48 GMT; Max-Age=1209600; path=/
X-Host: grn42.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 6c2347fba10abda9e9d5d6e449ac4cc9
Content-Encoding: gzip
www.shareteanationalcity.com/uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/d4394858-8590-4c70-ae11-dae37f0dae9d_1626404267.jpeg?width=1600&height=480&fit=cover&dpr=1
200 OK 145 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/d4394858-8590-4c70-ae11-dae37f0dae9d_1626404267.jpeg?width=1600&height=480&fit=cover&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1280, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 145 kB (145238 bytes)
Hash 7c0d91b6573416c5832a3681450d1b3b
a08c4dd6dce593e8471d64efe7fbca978de194c2
dfe79c1cc925b340f4bd6e2511d52762628aa5185736107f9f0473b68e15108e
GET /uploads/b/85b2435da9f395e0c812840d95404e19e93da4148671ad9176e38e6f9c7efbc0/d4394858-8590-4c70-ae11-dae37f0dae9d_1626404267.jpeg?width=1600&height=480&fit=cover&dpr=1 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6IktUVXV6MjN3cHlQaE8ydzd5YnVrOUE9PSIsInZhbHVlIjoic0dxZjBoem5SaHRhZ1NjK3NobzBNaG02bkMrcVo2Z2VNQzZ6cnNzaVFCTE9jdE1oZjFPcFRMUlQ5NVZhUWNUaHVkTGlqNEh5TVp5YlRIMkFTUG43OERXNWUzRDRnTXBvUGVNVmNTOHZlSzV5UERKT2VWamNiT1ZGemx1QUtCZUgiLCJtYWMiOiI4MDFmYTczMTJkMDc2ZGJiYjMxNDA2ZjY4NjkzOWUyZDVkNGE1ZmJhN2RkZmYyNTRlYWVhNTI2NmFhZjcyNGI0In0%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6Im9cL3R2N2RtZVNwTzIzdXZpMDNxc1R3PT0iLCJ2YWx1ZSI6IkppV3docVwvSG1hM3JJa0lkODJzVExaUCtBQXZxZEJFa1ZPMnlONXQxZWhUbjIrN25qUFViUERZYTJcL3BEYmtzdFwvdWlmVnFFUWpFR2xVc0tYVk01blRXTlZna1c0N0pQRVhTR2xsVHU2R0x0a3lRN2w3b1RjM2ZFaE5pb3ROUnF1IiwibWFjIjoiMmMzMDY5YjQ2YzUzZDM4N2Y4MjA3N2NiMTFiNDFlNWZiYmYyNzAyNTFiYzdkMWI2NzRjZGJjY2IxNDk0NzdiNSJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/webp
Content-Length: 145238
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "6C440XRTsckfhpVQ/uUUC/gtM9SmRA4MnBWYrUX9vdA"
Fastly-Io-Info: ifsz=391557 idim=2880x2304 ifmt=jpeg ofsz=145238 odim=1600x1280 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx0000000000000035efa85-006285ec6e-b9fbc20-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z2129
X-Storage-Object: 2129403f46ea5b3acf9bca2414e740cb8bc9798bf03b59713876fd01b406395d
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10068-SJC, cache-pao17441-PAO
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1673581668.835226,VS0,VE328
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn82.sf2p.intern.weebly.net
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=30dfce49-9ee0-40df-8ff5-e3c44e0d41a1&batch_time=1673581653260
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=30dfce49-9ee0-40df-8ff5-e3c44e0d41a1&batch_time=1673581653260
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8d36404ee19767b3c1e01b33b9bcd879
0e16058bd057341ea06b57720f78f37e9823811f
0a165bf2002272892b6938b8be0f1f080eb20f80893f5c26855247f69d9cdd90
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=30dfce49-9ee0-40df-8ff5-e3c44e0d41a1&batch_time=1673581653260 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15654
Origin: https://www.shareteanationalcity.com
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 03:47:48 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c67_i1_w800.jpeg?width=640&width=96
200 OK 48 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c67_i1_w800.jpeg?width=640&width=96
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x640, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3cabba5e3e398334c1bbc22d8c33f8c
6a0e330dce1e88999c1d42cbaedb7c5b504451fb
504afa6cbc6630a873f1224f84c33ae5f2cda2a890e22c2d54e743ad64383921
GET /uploads/1/3/1/2/131248217/s478381384635632615_c67_i1_w800.jpeg?width=640&width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/webp
Content-Length: 48166
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "1Pb3hpv34KrI1kmIx+7Xfz7b7elUyVQgRxJ+7yEsLiQ"
Fastly-Io-Info: ifsz=55955 idim=800x800 ifmt=jpeg ofsz=48166 odim=640x640 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx000000000000002974d02-006285316d-b9fbc7f-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z9437
X-Storage-Object: 94372081a11ea61f048b485fd3dfd75a52f4c14930cbc182282b696b0847dcf7
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10075-SJC, cache-pao17467-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673581669.871012,VS0,VE102
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn14.sf2p.intern.weebly.net
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c63_i1_w598.jpeg?width=96
200 OK 71 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c63_i1_w598.jpeg?width=96
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 598x784, components 3\012- data
Hash f8122dd315dd221f374b4990acf845d7
6d872b8994ec05d77adfe76e9ca69794eeb83ac8
e78ca9d9e8047ea73d06ca03683127529a332d22b3229bc86c10099bc3f88be5
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/3/1/2/131248217/s478381384635632615_c63_i1_w598.jpeg?width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/jpeg
Content-Length: 70795
Connection: keep-alive
Last-Modified: Fri, 04 Jun 2021 08:11:28 GMT
x-rgw-object-type: Normal
ETag: "f8122dd315dd221f374b4990acf845d7"
x-amz-request-id: tx000000000000002ac1b34-0062853afa-b9fbc64-sfo1
X-Storage-Bucket: ze78c
X-Storage-Object: e78ca9d9e8047ea73d06ca03683127529a332d22b3229bc86c10099bc3f88be5
X-Host: blu146.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c64_i1_w623.jpeg?width=96
200 OK 71 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c64_i1_w623.jpeg?width=96
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 623x785, components 3\012- data
Hash 7d98d333d64043213bf415392fc54e5c
f59e9fb49356c2b1b7fee6a84e674568746d31b1
02f9bd40de2f594d83ea0a31e631981289584b0f5c9b74d46a798d79a3ee5b49
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/3/1/2/131248217/s478381384635632615_c64_i1_w623.jpeg?width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/jpeg
Content-Length: 71013
Connection: keep-alive
Last-Modified: Fri, 04 Jun 2021 08:12:33 GMT
x-rgw-object-type: Normal
ETag: "7d98d333d64043213bf415392fc54e5c"
x-amz-request-id: tx000000000000002e069a4-0062856293-b9fbc7f-sfo1
X-Storage-Bucket: z02f9
X-Storage-Object: 02f9bd40de2f594d83ea0a31e631981289584b0f5c9b74d46a798d79a3ee5b49
X-Host: blu84.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c65_i1_w604.jpeg?width=96
200 OK 86 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c65_i1_w604.jpeg?width=96
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 604x787, components 3\012- data
Hash 7676e39845f5ee132780b6ee7ca272ca
11864be60ef491376257e4b3cacf2d837aa4a7bd
ebc067045df9c39d56359f9bdd0f4e17aabd87c16787cd760689fc417ea5305a
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/3/1/2/131248217/s478381384635632615_c65_i1_w604.jpeg?width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/jpeg
Content-Length: 86042
Connection: keep-alive
Last-Modified: Fri, 04 Jun 2021 08:12:05 GMT
x-rgw-object-type: Normal
ETag: "7676e39845f5ee132780b6ee7ca272ca"
x-amz-request-id: tx0000000000000024b043a-0062850422-b9fbc20-sfo1
X-Storage-Bucket: zebc0
X-Storage-Object: ebc067045df9c39d56359f9bdd0f4e17aabd87c16787cd760689fc417ea5305a
X-Host: blu62.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 4669afe0de71123af5785221805237a6
5c9523511bd9ff3d262f3e6a8c74bd24d78d1a75
3489a221940f7023766aadbf3eb168b4b88f1dfc0a0456c9a0d15c92e7cacba9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3723
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:49 GMT
Etag: "63bf5339-1d7"
Last-Modified: Fri, 13 Jan 2023 02:45:46 GMT
Server: ECS (amb/6B99)
X-Cache: HIT
Content-Length: 471
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c69_i1_w720.png?width=640&width=96
200 OK 191 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c69_i1_w720.png?width=640&width=96
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 191 kB (191062 bytes)
Hash a6b481b87377471faf41e46372b24ad8
ab180b9fa2f2aab8f81e49db6385debb9872661a
b87070a993365325a3250ae6790aeaba90099c34adb1f70560fed77db2b75bcf
GET /uploads/1/3/1/2/131248217/s478381384635632615_c69_i1_w720.png?width=640&width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/webp
Content-Length: 191062
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "S/W+DyO1dotT75ckZU/7+9u/xdoFW+8OwQRwLrywAs0"
Fastly-Io-Info: ifsz=303987 idim=720x720 ifmt=png ofsz=191062 odim=640x640 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005d70bfa0-0063c0c9e5-c696eea-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z4a48
X-Storage-Object: 4a4801b3a6bcdcda3e549b9becf7d36803de8fb012d7ebab284f6219a93bda46
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2687
X-Served-By: cache-sjc10072-SJC, cache-pao17428-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673581669.877232,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu81.sf2p.intern.weebly.net
www.editmysite.com/ajax/apps/generateMap.php?elementid=02beb990-92f5-11ed-8c4c-1b1e8afd2213&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=85&lat=32.675262&long=-117.096939&pincolor=%2394619a&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1
200 OK 12 kB URL HTTP/1.1 www.editmysite.com/ajax/apps/generateMap.php?elementid=02beb990-92f5-11ed-8c4c-1b1e8afd2213&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=85&lat=32.675262&long=-117.096939&pincolor=%2394619a&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (827)
Hash 729eed25a5e5a8776ed23bc257f496b5
918fe1b1861083e47d04c8d28ff47e2b300a8524
f211042abeed0939df73684da763a1524346bff464370c8562240d9143256279
GET /ajax/apps/generateMap.php?elementid=02beb990-92f5-11ed-8c4c-1b1e8afd2213&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=85&lat=32.675262&long=-117.096939&pincolor=%2394619a&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1 HTTP/1.1
Host: www.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 03:47:49 GMT
Server: Apache
X-Host: grn103.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 12034
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
X-W-DC: SFO
Set-Cookie: sto-id-designer=EHFEBMAK; Domain=editmysite.com; Path=/
www.shareteanationalcity.com/app/website/square.ico
200 OK 6.5 kB URL HTTP/1.1 www.shareteanationalcity.com/app/website/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /app/website/square.ico HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:49 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001ae6532-00628473fc-b9fbc63-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn147.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 4f049fa8a457b838d83721acce4191c9
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 709dbdc77e1779e7c77865fa27f2573a
8781ced82c5109fbe49e8897844c7c1b89f4c340
8b02e05fc2de10b7aa4115870138f3b4e2a1f79a844924d7c50072b002405dc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
IP
File type ASCII text, with very long lines (2467)
Hash 26211ea0bc3161feb2026db17b11310f
560333868abdf3d5772e1ca57d9d089852d45cd4
ffbb22b914422facdbbb36185ad85d96a595f3c5972359dc693504fcfb3bee4d
GET /maps/api/js?v=3&client=gme-weeblyinc1 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 13 Jan 2023 03:47:49 GMT
expires: Fri, 13 Jan 2023 04:17:49 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53394
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=25
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 709dbdc77e1779e7c77865fa27f2573a
8781ced82c5109fbe49e8897844c7c1b89f4c340
8b02e05fc2de10b7aa4115870138f3b4e2a1f79a844924d7c50072b002405dc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c66_i1_w548.png?width=96
200 OK 435 kB URL HTTP/1.1 www.shareteanationalcity.com/uploads/1/3/1/2/131248217/s478381384635632615_c66_i1_w548.png?width=96
IP
File type PNG image data, 548 x 471, 8-bit/color RGBA, non-interlaced\012- data
Size 435 kB (435098 bytes)
Hash 58d9459b661e6c4a7ca203da1bfef1f0
f3199fb9fa114207420d2edb35323d91ccd70074
7fa9ac4c27157101fb338d0f3c38b2a1f03da00eaa7e13d165de5b584500e48b
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/3/1/2/131248217/s478381384635632615_c66_i1_w548.png?width=96 HTTP/1.1
Host: www.shareteanationalcity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Cookie: publishedsite-xsrf=eyJpdiI6IkQ3cGFVXC81R1dGcHdXMWxZWHJXSEJ3PT0iLCJ2YWx1ZSI6IlhqbEd6VDlmd2ZQM3NJXC8yNWNONEFhSDhwS0VqWXo2K25nbXlmdGtuSU5nSGNTNkpYd2xFMkpsZXd6K2llVEg5SDErTldGa2g5N1pORjNmXC95dlwvc2g1MlluS2o2U1ZmYmhaMXdmUXdkMWZcLzJpSzdLMzlUSGFsdzQ3UkM1YjhhbCIsIm1hYyI6ImMyZTJkZjUwMzk2MDZkYWI5NTcxNTQzOTQ5NDFkYTVlNzkzYmQ3NGViMmI3Y2UwNjA2MzczYjY3YTVkY2Y5NzAifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Ilk3R0NxTExjejFTUjJzQXVLMUtMWEE9PSIsInZhbHVlIjoiY1l2VEFjNjdrOXJ6RmJoaWpEaFduQ20yK3FrekhGcklIS3lvcVwvVGZoSTZmRmJIOXZWeitNaTNnbFcwOExocU96dzJuQmFwcHRJb1BEK0FBb0FwTm1zVm9BandldE9BaVNcL3o5Y1AxV2t1d1krbko1M0FSWVAxckFZVm1JT2JjVCIsIm1hYyI6IjhjZGVlOTA5Y2JhZGJkOGM3Y2Y1NTA5ZDVhYTJjMDE1OGNmYTg2OTQ3MDNlNjA3YzI3MWQ5ODE5ODRlMzU4OWMifQ%3D%3D; PublishedSiteSession=eyJpdiI6IjV5aVVOM1lxcHVZUlE5c3RTZDlyTmc9PSIsInZhbHVlIjoiV0psM3d5RjdiSGZqeVpqR0tTdVwva1E3VXhGT09FWWt3QUdQNktwaEplekgwOVZGcnF6ck5sY1VVc1FHUjNYaXJaZFI5VWs0ZDh5ajYwQ0hWK2hXUTJ4ZWpicGZJOU91ODJCczNFUzljeXdGNDlXcndPa2Q4cXgrcDFNOWdsdHMxIiwibWFjIjoiMTFjMTg2YzVjN2ZhN2I5NGE3MDQ5OWM5NGYyNzA0NmUxMGIzOTJjY2Q2YmMxMzY4Mzc2NWM1ZjdjYmE1ZjhiNyJ9; _snow_ses.d127=*; _snow_id.d127=0c57db6c-03a3-4523-b793-e36139521e16.1673581649.1.1673581651.1673581649.f5a5c124-b0f3-468a-87d0-cafac9cb9e55; _dd_s=rum=1&id=eb1a41ae-1866-4dac-87c2-f8229e872511&created=1673581649753&expire=1673582549753; websitespring-xsrf=eyJpdiI6InE1czlJcVQ0VlwvS2ZMeWxSV2Fvb2V3PT0iLCJ2YWx1ZSI6IlwvS0tWQXJ1MFRqcmpBc3A1N1VMb3FsNG0xVTEyZjQ4cEdFdFRTUXc2Q3d3eUFscTdhdDZNUlBVWU1aRjI0NHd2Snh3WHFYZ0t3ZzNFT1dWTGVVYjV3UVFwUzlSUlA5bEJ0MXRjQ3lIXC9WTXdEMkY5eVlHaEpkakZsM1dBRW9PYWIiLCJtYWMiOiI3MzY0NThhNGY2OTZjYjVkZTAxMmYzODUyMWJlYWIwMzU4MDg1Yzk5MmYzNTRjYmUwMjJjMWQ2Y2IwNmZhZGUyIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 03:47:48 GMT
Content-Type: image/png
Content-Length: 435098
Connection: keep-alive
Last-Modified: Fri, 16 Jul 2021 04:12:43 GMT
x-rgw-object-type: Normal
ETag: "58d9459b661e6c4a7ca203da1bfef1f0"
x-amz-request-id: tx00000000000005816fb9f-0063b900fb-c67eadd-sfo1
X-Storage-Bucket: z7fa9
X-Storage-Object: 7fa9ac4c27157101fb338d0f3c38b2a1f03da00eaa7e13d165de5b584500e48b
X-Host: grn61.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcda166666b85fee269f7730df586193
457edf4c21c0ae930d8810a679fd65f8918c3c94
aaf5548dadfd15830e48f5d696dde22b1984bc0f5a5e0e5591a9c007ded325df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.gstatic.com/mapfiles/openhand_8_8.cur
200 OK 326 B URL HTTP/2 maps.gstatic.com/mapfiles/openhand_8_8.cur
IP
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8\012- data
Hash feff9159f56cb2069041d660b484eb07
0d0a08cf25a258511957f357b89d3908f3c5e6e3
7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
GET /mapfiles/openhand_8_8.cur HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/bmp
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 326
date: Fri, 13 Jan 2023 03:47:50 GMT
expires: Fri, 13 Jan 2023 03:47:50 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcda166666b85fee269f7730df586193
457edf4c21c0ae930d8810a679fd65f8918c3c94
aaf5548dadfd15830e48f5d696dde22b1984bc0f5a5e0e5591a9c007ded325df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 71e87185e70f595e12a3613f1ac35c67
f1818783717cc0cb399a0bcddb8a9029cf7166d1
dff5f1029a06d6f1ed59e1f3e33af77d2ac550553d9fc69be48c2a81093dc2db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.editmysite.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 116036
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 71e87185e70f595e12a3613f1ac35c67
f1818783717cc0cb399a0bcddb8a9029cf7166d1
dff5f1029a06d6f1ed59e1f3e33af77d2ac550553d9fc69be48c2a81093dc2db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 03:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47d25a6f-205b-4caa-a891-4d66ffaf20a2.webp
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47d25a6f-205b-4caa-a891-4d66ffaf20a2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cce155e8d16cd44b6320b31f3ed3a6bd
df6f192090988cbd9eb66ea1d30d40db33bc38b1
802e70aab326ccb6ff50c4db978b4a9dc3d17d9e4f27998e8f77645489a3f704
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47d25a6f-205b-4caa-a891-4d66ffaf20a2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7067
x-amzn-requestid: bf609a5c-691b-448a-a92d-b36ac3903045
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ep0b5F5-oAMF0yQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c09ab2-0e7b423020aead5779118350;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 23:41:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QoPRnIMV4fZ2Dx2QIFE7B1BWm8cG6nh3i8_WRGiL2nZv3_IEdFZiGQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 23:41:52 GMT
age: 14759
etag: "df6f192090988cbd9eb66ea1d30d40db33bc38b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
200 OK 0 B URL HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
IP
GET /app/website/js/vue-modules.9bc3531c7b14b533b653.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.shareteanationalcity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:22 GMT
x-rgw-object-type: Normal
etag: W/"be42f69ec175a01b6e195526f58dae71"
x-amz-request-id: tx00000000000003b70ac6d-006384ffda-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.9bc3531c7b14b533b653.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: bc9c9b147c802d76500971d6773c4126ddad6f5d
x-request-id: 40250d3662d1b25130b369a7dbbdc2eb
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 03:47:44 GMT
via: 1.1 varnish
age: 3294988
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1673581665.505884,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72192
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
IP
GET /css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jan 2023 03:47:50 GMT
date: Fri, 13 Jan 2023 03:47:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
IP
GET /css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jan 2023 03:47:50 GMT
date: Fri, 13 Jan 2023 03:47:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
199.34.228.184
104.18.20.226
93.184.220.29
95.101.11.115