r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8970
Expires: Sat, 14 Jan 2023 01:13:07 GMT
Date: Fri, 13 Jan 2023 22:43:37 GMT
Connection: keep-alive
www.buffer1.com/
302 Found 338 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5b61a773bc0c6132813f62276b4ee48
98344a9ff156e99b5ab7a3121d83bfdf3599417f
f6c5b9c98466fcc59ecf9178595743ac42b2483e806a538133a9b57330327407
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 22:43:37 GMT
Location: https://www.buffer1.com
Set-Cookie: publishedsite-xsrf=eyJpdiI6Ik9IZjhWNUlCT2NOWmVkWE5wbFhuOXc9PSIsInZhbHVlIjoiVXZ2OEM1aU5HVDhiVHpCQ09TZ0E1QVNzN0NVQTBhTzllSHozTWxiWmZFaWFYUytQT0ZBNlRESE1OZk8ySno4NHc3MnN6dEdmdjJ1WVQ0aFczeXZ6a2dtXC9cL2NZUit4bjhzN3NuZTlmMHQrdUo2dGhLaXVIRkI3UkRsQjcwa0F3cCIsIm1hYyI6IjI3MjhhOWEyNTY1ZWM2MDI2NTIyNjE4ZGE2NjM2ZmEyMTZjZmE3ZjM0YzU1OWVlNTdiOWFlOWFmY2I1YzQyYjgifQ%3D%3D; expires=Fri, 27-Jan-2023 22:43:37 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Ikhsbm5mZXU4YU9xYnQzRmQ0YTBLUkE9PSIsInZhbHVlIjoiMTVyVTlaQ2syM0JpeW4zZlVJY1ROOGhCZVJNanVXWmQraXR0UVZFelNGQ01EbEgyd1VxNXV4VFZ0czNtRnhqenZkUWxiQ25sQ2F2UGdXMGpcLzV0eDJUd1RWcHVUN0p2dDd1U2l4TmlsN1QxQ0w3amorS1pJWTRWZlwvNnFNbjY0ViIsIm1hYyI6Ijc4MmVmODU5ZTQ4YjA4NmY0MDcwMjFkN2Y5MTE4ODE4YjAxM2U2ZWMwYWJiNTgyODg3ZWZmYzE5YWQ2NGRiYTgifQ%3D%3D; expires=Fri, 27-Jan-2023 22:43:37 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6InViaXZNRDRiUmdJekpjQ0tDWjR0V3c9PSIsInZhbHVlIjoiTFBZenEwQ1FNeDdMbGJ0bTd2QjFuXC9mNktlNElTVE5nUGZSVVhkR1NLUktrYTZGanN2RmR3aUhWUUV2Z0VOcmZXcFVuN1wvSjBOSU9zNUF1dXF6Tnlna2NCSVZKb0x5amtCd0JoV0UxcVZXbFNlSVR4MlN6RmRSbHE5SFwvMEQ4T2siLCJtYWMiOiI1NGZlYTA3ODljNTk3ZjI2MTdiNmRkNmY0NGU2ZDQ3ZjA4YTkyODA4NjY3YWQ1MTEyNjBiYjk3NWM5ZDI1ZjJmIn0%3D; expires=Fri, 27-Jan-2023 22:43:37 GMT; Max-Age=1209600; path=/; httponly
X-Host: blu134.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: f0d024585ccc583bb39204de959a0aff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3459
Expires: Fri, 13 Jan 2023 23:41:16 GMT
Date: Fri, 13 Jan 2023 22:43:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2466
Expires: Fri, 13 Jan 2023 23:24:43 GMT
Date: Fri, 13 Jan 2023 22:43:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 22:41:59 GMT
content-type: application/json
age: 98
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5xiLw37tFQuhBWGsMO9z1c7fgQ0Y0/kOcFB9FrexJHxSvNfL2rE8NiUoZE00smrxwK2zO49A3IA=
x-amz-request-id: TTPA1KM7K1ZXD625
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 22:43:29 GMT
age: 8
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 22:43:37 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc8219a4c826cfff6fa99ba241e24da9
f08cda260e39b001053bc2ed0013210a7a06c5a7
c52aef12b68359c32300eb21fde3b58a9d811d0b0163138038c85d038a264005
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C52AEF12B68359C32300EB21FDE3B58A9D811D0B0163138038C85D038A264005"
Last-Modified: Fri, 13 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 14 Jan 2023 04:43:38 GMT
Date: Fri, 13 Jan 2023 22:43:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 22:33:45 GMT
age: 593
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6561
Cache-Control: max-age=130349
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:38 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 10:56:07 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cVVLmEIqFP2F92he/FTz+A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S9oB+VTW0ahzZRnkJeMPvnpo7Wo=
www.buffer1.com/
200 OK 11 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (27860)
Hash bdc306fa09ca9948f30d23553525850e
44a29b5d9d6dfa62772329406744c26a506bcd53
088ef8c49058458112a7544ca4491174805cfdea202548362d3de2dab6d36aab
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 22:43:38 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; expires=Fri, 27-Jan-2023 22:43:38 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; expires=Fri, 27-Jan-2023 22:43:38 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; expires=Fri, 27-Jan-2023 22:43:38 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn74.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 6831d9779ac0b7d6c5ad6ec0f3fe8fe7
Content-Encoding: gzip
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 04 Jan 2023 19:27:59 GMT
etag: "63b5d33f-124fe"
expires: Thu, 19 Jan 2023 08:38:42 GMT
cache-control: max-age=1209600
x-host: grn114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
age: 741896
x-served-by: cache-sjc10061-SJC, cache-bma1656-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 8648
x-timer: S1673649819.897695,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
IP
File type ASCII text, with very long lines (11882), with no line terminators
Hash 20a4e66f534b80396d40bbc4291b2172
d7c962996f2715d94483be2bf9b644c7185d7ec7
0f19e8ad1c9bd5ae2ae5141f31b4e491bb460558da0ac51cd402964e716880ac
GET /app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Mar 2022 18:09:33 GMT
x-rgw-object-type: Normal
etag: W/"40372ca3b0cfa19f4e5d664243108364"
x-amz-request-id: tx00000000000005ce1aaac-0062434bb9-a9f1ce7-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 341393
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.898652,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4998
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
200 OK 23 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
IP
File type Unicode text, UTF-8 text, with very long lines (64204), with no line terminators
Hash 5a08057dbd0b09fdcef375354aca0ada
3633aece56e4a03b6118cf199c40a4f4c6915faa
762c102d3386b3244effa9bfc21ef31dcb5d143732eb17041c0097c2d99f2b71
GET /app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Mon, 09 Jan 2023 17:22:21 GMT
x-rgw-object-type: Normal
etag: W/"651e92c6a8443e8f2e6ffaa794179cc0"
x-amz-request-id: tx00000000000005ad09296-0063bc4db0-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 330155
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.899973,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23362
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
200 OK 24 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
IP
File type Unicode text, UTF-8 text, with very long lines (64921), with no line terminators
Hash 8c60406ea590dcf69b9449935dd2a3e9
0f5f05bb816318e9c296a5dfb0722d26d070a3fe
c491b43fcc54355cbad50b9e3f7669ffeca7be6fac1e833feb0a4b7aa9bcc82f
GET /app/website/css/site.973ddc22f8694b15d85e.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Fri, 06 Jan 2023 17:22:54 GMT
x-rgw-object-type: Normal
etag: W/"8b3c9559c02b85f1e4036133d13c07f7"
x-amz-request-id: tx000000000000058a1ba38-0063b8595a-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 21a345688c10c921dba7a437bb0211486ebff07d
x-request-id: d265bba703ee0368a2bf7d3826c11b81
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 623899
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.900946,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24139
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
200 OK 72 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
IP
File type Unicode text, UTF-8 text, with very long lines (27432)
Hash f4b29141d74cfc31ae87b2379bf827c6
d3cecf2609cbc423e0a59e9cad96c96595fc550c
77ba93a6fbe46719dede0298898f4d896c073a42d0c093179615edf38f1fd0e5
GET /app/website/js/vue-modules.9bc3531c7b14b533b653.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:22 GMT
x-rgw-object-type: Normal
etag: W/"be42f69ec175a01b6e195526f58dae71"
x-amz-request-id: tx00000000000003b70ac6d-006384ffda-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.9bc3531c7b14b533b653.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: bc9c9b147c802d76500971d6773c4126ddad6f5d
x-request-id: 40250d3662d1b25130b369a7dbbdc2eb
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 3363143
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.905552,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72192
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.dcd4cf774cb647eba251.js
200 OK 25 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/runtime.dcd4cf774cb647eba251.js
IP
File type ASCII text, with very long lines (51802)
Hash b733f746b1532a950a96d38256ae0ff1
4e4d17ff09b142055dd515a7d485cc587d8bf524
60e37cc354c3cbf297533357b78fd22a1218742fb57e4897d7d2904364a7a9bf
GET /app/website/js/runtime.dcd4cf774cb647eba251.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 19:36:59 GMT
x-rgw-object-type: Normal
etag: W/"2b2b98a7a2c003f4df2ef89398dec8f8"
x-amz-request-id: tx00000000000005c625ff7-0063c061ac-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.dcd4cf774cb647eba251.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2258019346dfbeb37ac14295d7775252881e5e0b
x-request-id: 23ec7117a239caf40e6056069a48515e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 97427
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 656
x-timer: S1673649819.911034,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25402
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/languages/en.41603737f0499bd961b0.js
200 OK 154 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.41603737f0499bd961b0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 154 kB (153542 bytes)
Hash f17460586f44d577fb3f63df262f8819
22ecdb4c1e159f26a031abe344ec2bb5ba9f6442
b788b7794d74b7e011607d8d3d0bd85b5b0e46ecc77f13fa626e762e2adfb48c
GET /app/website/js/languages/en.41603737f0499bd961b0.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 19:36:59 GMT
x-rgw-object-type: Normal
etag: W/"366756c7072b4495ba03228b4ef9cb1e"
x-amz-request-id: tx00000000000005c2a9aff-0063c061b8-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.41603737f0499bd961b0.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2258019346dfbeb37ac14295d7775252881e5e0b
x-request-id: 5495887ad6eefdcd5e795bb68cb8378e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 97427
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.906825,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 153542
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/site.6ad870b2d5fa2e0bbdfd.js
200 OK 643 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/site.6ad870b2d5fa2e0bbdfd.js
IP
File type ASCII text, with very long lines (48326)
Size 643 kB (642806 bytes)
Hash 09e160b8b28ebe99cbb7281a4bb4ee64
f6f5efeb16b1e38c8970e85c0ed56ef597b70b93
ab0853fc770920d7c23ee15630683ca53882efe5d0e5c324123e5c82f5d560d6
GET /app/website/js/site.6ad870b2d5fa2e0bbdfd.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 15:57:40 GMT
x-rgw-object-type: Normal
etag: W/"e3c6ccd4a8684299a2a3af17aa818ca7"
x-amz-request-id: tx00000000000005c3a939c-0063c02e4f-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.6ad870b2d5fa2e0bbdfd.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f02741f27cd4d4dcf57981921361cbdfa9e227a2
x-request-id: 039bfb0d0d41f170ee7aa4cbbab1ccef
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Fri, 13 Jan 2023 22:43:38 GMT
via: 1.1 varnish
age: 110562
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1673649819.916555,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 642806
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash b1bace77d8bec195f6ad41306319de7f
f7138c215af1be6f5cf3fcdcb502632cbad31850
287f2328c654e081d6ca18c3ef3123f54bbfe476eb211a3d70bdaa3244da8385
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:39 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "625C619483EA68E9F4E8494C921111C00E8E0846"
Expires: Sat, 14 Jan 2023 09:00:00 GMT
Last-Modified: Fri, 13 Jan 2023 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2313
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7891a6e90ec8b524-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6d948edc69e3723c0d71dab798465213
91bfb56240011a96786e6279b99096463c011f4f
254f2f23f8e1097009328028774ba70434a41d7504f7bc4c969b8a0aff2052cb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157952
Date: Fri, 13 Jan 2023 22:43:39 GMT
Etag: "63c19826-1d7"
Expires: Sun, 15 Jan 2023 18:36:11 GMT
Last-Modified: Fri, 13 Jan 2023 17:43:02 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7CJP0oDOnJNLzNb41NKV3NGghQNwoQxR9WKF8IL3i7RDq_8BGkRzwQ==
Age: 3189
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6d948edc69e3723c0d71dab798465213
91bfb56240011a96786e6279b99096463c011f4f
254f2f23f8e1097009328028774ba70434a41d7504f7bc4c969b8a0aff2052cb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156102
Date: Fri, 13 Jan 2023 22:43:39 GMT
Etag: "63c19826-1d7"
Expires: Sun, 15 Jan 2023 18:05:21 GMT
Last-Modified: Fri, 13 Jan 2023 17:43:02 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JMmy6GxYzyr9xqMbkHOG0aLIXJm86SBe4-7UgrQoD1ziOZD43fT6FA==
Age: 1339
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.buffer1.com/
Origin: https://www.buffer1.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 22:43:39 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.buffer1.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16130
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 22:43:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16130
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 22:43:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5201aa-c0a6-43a3-b371-9091b021b171.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5201aa-c0a6-43a3-b371-9091b021b171.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6f9fd45fe3dfe1bc0ee610925c385d
4ab08950008a4ab0a52091bb6f186c12814276e9
3dab6a58e53155e44117fbd9d40c4f38a7586efe1e69db1a064d2bbc5bbf185a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5201aa-c0a6-43a3-b371-9091b021b171.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8681
x-amzn-requestid: 1060e7e7-3864-4ce5-b0aa-cfe24bb1a21a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qdGvqoAMF57g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce42-3cf8e4535d417e6f5142f23d;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fn6fJcMooAv0V8MKuIM5EMGIEBijeoPBv5VWPtEz0j7LbfLoWw_soA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 3278
etag: "4ab08950008a4ab0a52091bb6f186c12814276e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4f04f55a9d261ddda8128b0bb721446
5e8df480a1650606937ee493660177bf09c49c14
3a357fbbd9f41d384a06e151a0daff50b345520d4816e70cc1b2c694949ce79f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4936
x-amzn-requestid: f1808de3-5712-4a65-8394-c1624668cdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pZFbIIAMFnvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3b-48c4b0cd36319a2634c0c5f0;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rudCuuUXfxE8aRq8-FFIwHE4tqeSWxYrd8uilWI-8DZSY9A-8EiLQQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:06 GMT
age: 3273
etag: "5e8df480a1650606937ee493660177bf09c49c14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 06:50:08 GMT
age: 57211
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9c918c3f0569cbf09fdcd8998e2fc00
ad06e348d49e8ae0550d922b50bc2a1d4905457a
8f96e49cf0dbbad59d260d0f991d79eb72ea25dcc0caa5ba4480056bd918d07d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5371
x-amzn-requestid: fcbafc8b-5b89-49e6-8ebd-157cb3b24a55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qnERXoAMFsZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce43-3eb3b4d84dbf415a3dec1308;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AbaES_6874zaabJY_z0_FOZfJx86Zsv-osNxWqzef8DDNyelo0HRtQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 3278
etag: "ad06e348d49e8ae0550d922b50bc2a1d4905457a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2363dbe7bb6a459853d8d19cab50e70b
ded76de1dd453e40dbf6eaa8607cf19fac7f71a4
f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7447
x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qSFjAIAMF7HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AYaeawnEmwHkyx3h-yliVx-ARcRB3W5kbtFH5tARnL3YMD6e4WYAQw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 3278
etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd34cbb2e-8cd4-4c61-a8c1-a6ab4f223abb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd34cbb2e-8cd4-4c61-a8c1-a6ab4f223abb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41aec5fd4a5d8bb8cd840f4843d48250
13b3efa7259324d7dca3576a69936b5a7339ecf1
742eb5ccd303bf58c9d7c2288b1d36f2989bd030b69293c74dca463fd8bb6a10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd34cbb2e-8cd4-4c61-a8c1-a6ab4f223abb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10461
x-amzn-requestid: 2545c321-708a-418a-81a8-0b108fa83dc9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pZEa5oAMF4cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3b-7544647613db6c4c198145f3;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0bt51kj0PtGNr8Z37lVs7-BoR82dj3clknoURdKFQexK7yV9Pvf_sw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:06 GMT
age: 3273
etag: "13b3efa7259324d7dca3576a69936b5a7339ecf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1934
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 22:43:39 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688; Expires=Sat, 13 Jan 2024 22:43:39 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.buffer1.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buffer1.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.buffer1.com
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:40 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://www.buffer1.com
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 894 B URL HTTP/1.1 www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with very long lines (894), with no line terminators
Hash 618aaf4cf31901f376976f977955c3a1
276d6fe8e8060628dbe084c07ee27b3e477acf02
d7dd4515f40f7e402e74723ed80f1708fa324e73c844809c3bf956ec255a2b91
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0=
Content-Length: 78
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649803.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:39 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu50.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 894
Keep-Alive: timeout=10, max=53
Connection: Keep-Alive
Content-Type: application/json
www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0=
Content-Length: 83
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649803.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:40 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn139.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: application/json
www.buffer1.com/app/website/cms/api/v1/users/143904206/customers/coordinates
200 OK 70 B URL HTTP/1.1 www.buffer1.com/app/website/cms/api/v1/users/143904206/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0202fec5c18173b1ccef517d7a8fb076
ed3c42952ab998b5f8f4570735caccb08bbbfbba
a496539bedf56d084f7654fb244367daf638da6ab09f7812b81c743baa995e26
Analyzer Verdict Alert fortinet Phishing
GET /app/website/cms/api/v1/users/143904206/customers/coordinates HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0=
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649803.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 22:43:40 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9; expires=Fri, 27-Jan-2023 22:43:40 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IjJocUxTOVRMellRM0xwTFpyelc3Rmc9PSIsInZhbHVlIjoidHFLeWhNVUVEeDkybE9QNTVVSEpZUElYQmZcL3gwN3V6RGUxdjR4VGEzSXhFUEdCcnloVDUwYjdzTVRscUxtTVl4R0hiQ21BU2NGYmJCQTA2K2xCVnI3ZnhIUndvWXVmOFJ6c2ZheUliYlFzUmpUSnowbW5SclQ5SUpEVk43UmxSIiwibWFjIjoiNjIxMjVlZjI3MDZjOTFiNzkwNjIwZDhmODMyOTA3ZDRiNGVmMTI0MmI3ZmQyYjc4ZjM2OTEyMzRjNjFiMjM3NSJ9; expires=Fri, 27-Jan-2023 22:43:40 GMT; Max-Age=1209600; path=/
X-Host: blu64.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 936b81f4ebe768712daab98efcdde84c
Content-Encoding: gzip
www.buffer1.com/site-icon?device=ios&size=180
404 Not Found 620 B URL HTTP/1.1 www.buffer1.com/site-icon?device=ios&size=180
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 609283f0abd216f052c6b32877678dfb
990ea8c9bac587ffc680dfdcaf54706c0ee3288b
2c02a57d702cb0cf240374bb61b7724b408b998b9cd9825bc0e55f74f27cc10d
GET /site-icon?device=ios&size=180 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649803.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 22:43:40 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; expires=Fri, 27-Jan-2023 22:43:40 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; expires=Fri, 27-Jan-2023 22:43:40 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; expires=Fri, 27-Jan-2023 22:43:40 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn69.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 0147825ba13ee3eaa560fbd447557327
Content-Encoding: gzip
www.buffer1.com/square.ico
200 OK 6.5 kB URL HTTP/1.1 www.buffer1.com/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /square.ico HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6Im10UmN6aDBEaUpWM1EyaEtsZ3RTTlE9PSIsInZhbHVlIjoiNzBXOEtZQytUXC9ValB5dzFnU3BhK1d4Njhycmd0Y0dpN0NcL2RRZnhuU2txem81RUswS09LdURNa1M0QXFHT2ZreEhzZExLaDk1V2FpY3RMK2FLdjVLY3lsUHFSZXVOTHplTkxZRk1oeDdyWUllRVNUNExIbGJtSmt6ODJ5d3lmKyIsIm1hYyI6ImU0Nzc5ZmQ2MzBjYTJmZmViMmNjMDgyYTI0MDljOWE0YTJlMzI1Y2YwN2M2NzU4ZGFhNmRkZThmOTllMTFiMzYifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InQwaW1uc0lPUDNMT1MyeWtubjlyUkE9PSIsInZhbHVlIjoiVTNhU2lBSkNiNFlVcVpIMVpUT0h0ZEx3WHh3eXRHN1BDZVlNNFl1ekNwNWVjMzZsRWlrTjhiVDBTVGdzN1AzcjNYWkRReklpb3pCalZhM2tJdEVtYmhqMDcyNWVLYlFwUXRMb0Y3UDVha1ZKWTRLNzVraW1XWGRoN1ZFRVd3aksiLCJtYWMiOiI0MTQ3NTVhMWEyN2EzZjNmYTU5ZGRhMzI5NWY3ZDcwMTA3NTZjNTJiOTVlZTI0ZmEwNmY3MmY2M2NlZmQ4MTcwIn0%3D; PublishedSiteSession=eyJpdiI6IlE4OTdMbCtkVitQR1BqZE94KzVVV2c9PSIsInZhbHVlIjoicURTVE9zNHhZWDVnOWhuaEJOcDhIXC9SMlQ3emtaNXI5VEZTcERKeHc5MWo4cXRvdXN3SytBdzJudTBtbldSdHNLVDBDMFhpU2hUOHRxXC94VjNQMWkzUENta2NEb01HMVdTWkhnbTdscGhpZUh3Zno4cmZFd0JENkFvUUhhUXYrbCIsIm1hYyI6IjBmMDliNTMzODBlZTY2ODU3MTBmNjYyZmVmM2ZkNDcwZjMyNWZlNTUyYWFlZDFkMmMyNzRhMTJhYmZlZDNiZDUifQ%3D%3D; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649803.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:41 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001af9993-00628473f6-b9fbc29-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn140.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: ede667091f0f797508b2e1cdac641c09
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2374
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 22:43:41 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688; Expires=Sat, 13 Jan 2024 22:43:41 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.buffer1.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1833
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 22:43:41 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688; Expires=Sat, 13 Jan 2024 22:43:41 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.buffer1.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash de3b2a126ef1eca819b20f972246bc58
05ef1d2c447cf9b32c2a0308ebca6ada275c1aeb
8efc66252e9ec17671c07ed69aa457fb42e838128e822d9b6e3b07cfc3535382
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1663
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:42 GMT
Last-Modified: Fri, 13 Jan 2023 22:15:59 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash de3b2a126ef1eca819b20f972246bc58
05ef1d2c447cf9b32c2a0308ebca6ada275c1aeb
8efc66252e9ec17671c07ed69aa457fb42e838128e822d9b6e3b07cfc3535382
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1663
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:42 GMT
Last-Modified: Fri, 13 Jan 2023 22:15:59 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0=
Content-Length: 89
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn140.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=6
Connection: Keep-Alive
Content-Type: application/json
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=690a0b3b-c9a1-4992-bc11-25defb3dedc7&batch_time=1673649805534
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=690a0b3b-c9a1-4992-bc11-25defb3dedc7&batch_time=1673649805534
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b49fac73ee27519090a7d4b55eeed954
dc6e54597d929b305786da2976b6bc48a2072ae3
2dc54cab519f53f16b3a1ec20c5c3ff9390115731f8c8724390adc29bec4b279
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=690a0b3b-c9a1-4992-bc11-25defb3dedc7&batch_time=1673649805534 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16289
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 22:43:42 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=6b4c8540-c97b-4ee9-b6eb-8374c98fa0a5&batch_time=1673649805663
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=6b4c8540-c97b-4ee9-b6eb-8374c98fa0a5&batch_time=1673649805663
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2fb00d0badd2362166302f7d719584cc
c8286dbd4785b43ebab167fb1fd2227330d25dfb
a7f99e90c313f31067dc8577baa8444c848ad2f34f6d563967b62a8114349908
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=6b4c8540-c97b-4ee9-b6eb-8374c98fa0a5&batch_time=1673649805663 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15954
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 22:43:42 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/Buffer-logo-fnl_1668791915.jpg?width=400
200 OK 15 kB URL HTTP/1.1 www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/Buffer-logo-fnl_1668791915.jpg?width=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x178, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f300e926c4ae405b322b9d5212d81327
74bc4234c920d53e4465708f644663ecb04d56a8
90cc43b6a5d0928ce8a8a8360763fecd815af6cd3e7e3d6fc44fea5843a288ff
Analyzer Verdict Alert fortinet Phishing
GET /uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/Buffer-logo-fnl_1668791915.jpg?width=400 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:42 GMT
Content-Type: image/webp
Content-Length: 14916
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "+2pbXm1ia2H2XP3Lyr8kpbPbGdnWnuUVZygMM3C8DsE"
Fastly-Io-Info: ifsz=1981461 idim=3141x1396 ifmt=jpeg ofsz=14916 odim=400x178 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005e45e4c4-0063c1ddbe-c669cc6-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z0dc4
X-Storage-Object: 0dc4aac01ea6037c440162ff0849a80d9e038c57bef6ff2b5d630ebf0209f227
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 224
X-Served-By: cache-sjc10061-SJC, cache-pao17467-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649822.305818,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn77.sf2p.intern.weebly.net
www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 79 B URL HTTP/1.1 www.buffer1.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0=
Content-Length: 77
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn155.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: application/json
www.buffer1.com/app/website/cms/api/v1/users/143904206/customers/locale
200 OK 36 B URL HTTP/1.1 www.buffer1.com/app/website/cms/api/v1/users/143904206/customers/locale
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 84d8976e69ede075d29893d5a4edb32e
0d93241406b90b37202e0a9a4547159983e58a0d
4b3b556e9891c1d9bd2d7722fd46a43822113e738daf981ab4972a6bc18cea53
Analyzer Verdict Alert fortinet Phishing
GET /app/website/cms/api/v1/users/143904206/customers/locale HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0=
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 13 Jan 2023 22:43:42 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6IlJpYm5YSEk0S1JQMWlUOXJ0d3F2d0E9PSIsInZhbHVlIjoiV01KZEMybzlHMnU3NzBuZ3c2QldXZ1wvNitqTFBIVnFXVXdhQm1BSk9wQTR2eGxVcTBrbGoyZWdKUEJPbHcrUGh0XC9McGZoYXdudVwvWUh6Z1paVWVZeGpVQ0FIVTZTb1dRTEV4bGVBMWhQNm5kZ1Y1akx2aEV4U0Q4cDZBeW91bCsiLCJtYWMiOiJjNWEzZTBmMTFlZTMzYWE2Y2YwNTRkMWJmODZkYTI3NWViODIyYjQ4YWJmZTY1OWQ4NTYxMjFmYTE4Y2Q5OTI3In0%3D; expires=Fri, 27-Jan-2023 22:43:42 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IkRaTnRnZ0Q1VVp0Ujg2Ykc1VXlcL2FBPT0iLCJ2YWx1ZSI6IkNpSnJ1Rk1WWEt2WDRLZlV0cVI2aFRjQ1VVM2c0U1wvMnkyc3VoTUhQZ1k3SEsyXC9MY2V0MThxbm9pM1wvY3lLZUxXbmhwNnUwZ0dpaVpEQXR2K1wvWE5ZOUJ5bEtWc1wvQ0FXWDBJeHE2WEE3RnhKZkJET1lZVG01QnhYWUd4TG5mTVwvIiwibWFjIjoiNjQ4YWJmNTA2MzYzZTlmMWExNjI4NmFjOTE3Mzk2YzFiZTAxNTEzOTJlMmU1NjM3NjJmYmI2NzQ5OTI0ZjZjMSJ9; expires=Fri, 27-Jan-2023 22:43:42 GMT; Max-Age=1209600; path=/
X-Host: grn155.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 3321610f363d6c48346c4ef5666a3720
Content-Encoding: gzip
www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/2017%20GTR_1668814452.jpg?width=1600&height=480&fit=cover&dpr=1
200 OK 94 kB URL HTTP/1.1 www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/2017%20GTR_1668814452.jpg?width=1600&height=480&fit=cover&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1279x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0cb39915cff9d1599e43d81920ddaf46
c2b5bcb4be4b5e51d13ce2bff0b59d7f0ce3ba1c
562918589ec64edcc42bee4a8d5045666a71eb96910b6da33c9d52eef056eaa2
GET /uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/2017%20GTR_1668814452.jpg?width=1600&height=480&fit=cover&dpr=1 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:42 GMT
Content-Type: image/webp
Content-Length: 94494
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "sFCeAdqMflXK3cXYvyBf6rypzKard2vZgbM5ks74a20"
Fastly-Io-Info: ifsz=219370 idim=1279x720 ifmt=jpeg ofsz=94494 odim=1279x720 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005d0e4c53-0063c1ddbe-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z63a1
X-Storage-Object: 63a1dd1169a2207d529cfd2530c5d2e725b23a7d2178febd6ec28e4e3a5084db
Via: 1.1 varnish, 1.1 varnish
Age: 224
X-Served-By: cache-sjc10042-SJC, cache-pao17422-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649822.446582,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu81.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 3530
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 13 Jan 2023 22:43:42 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=59ae9c67-4a44-4705-90eb-c6a583082688; Expires=Sat, 13 Jan 2024 22:43:42 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.buffer1.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=70d8c662-6351-4562-a679-e6669008d665&batch_time=1673649806812
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=70d8c662-6351-4562-a679-e6669008d665&batch_time=1673649806812
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3b2c3678e832332a86d4d764f323d61a
b46cfb01c7c0bf37fa2c0db687611eb9bf1e676c
6d1a4241a90c3e18bcd16b08527d998c1136c87b69661177b0af2477d2a1531a
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-4dbdfec&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=70d8c662-6351-4562-a679-e6669008d665&batch_time=1673649806812 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15751
Origin: https://www.buffer1.com
Connection: keep-alive
Referer: https://www.buffer1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Fri, 13 Jan 2023 22:43:43 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p2_i1_w1268.jpeg?width=640&dpr=1
200 OK 27 kB URL HTTP/1.1 www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p2_i1_w1268.jpeg?width=640&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9a0853a4eeccba543342820c07cbd41f
d4e0951b648e4dd075c0959c5c519cdecb71e548
723dd8a689bde6887f06bd2e28ed66fcafe4669d0cf597b7f4f15e931793bc9a
GET /uploads/1/4/3/9/143904206/s267916799230486251_p2_i1_w1268.jpeg?width=640&dpr=1 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IkRaTnRnZ0Q1VVp0Ujg2Ykc1VXlcL2FBPT0iLCJ2YWx1ZSI6IkNpSnJ1Rk1WWEt2WDRLZlV0cVI2aFRjQ1VVM2c0U1wvMnkyc3VoTUhQZ1k3SEsyXC9MY2V0MThxbm9pM1wvY3lLZUxXbmhwNnUwZ0dpaVpEQXR2K1wvWE5ZOUJ5bEtWc1wvQ0FXWDBJeHE2WEE3RnhKZkJET1lZVG01QnhYWUd4TG5mTVwvIiwibWFjIjoiNjQ4YWJmNTA2MzYzZTlmMWExNjI4NmFjOTE3Mzk2YzFiZTAxNTEzOTJlMmU1NjM3NjJmYmI2NzQ5OTI0ZjZjMSJ9; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649807.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6IlJpYm5YSEk0S1JQMWlUOXJ0d3F2d0E9PSIsInZhbHVlIjoiV01KZEMybzlHMnU3NzBuZ3c2QldXZ1wvNitqTFBIVnFXVXdhQm1BSk9wQTR2eGxVcTBrbGoyZWdKUEJPbHcrUGh0XC9McGZoYXdudVwvWUh6Z1paVWVZeGpVQ0FIVTZTb1dRTEV4bGVBMWhQNm5kZ1Y1akx2aEV4U0Q4cDZBeW91bCsiLCJtYWMiOiJjNWEzZTBmMTFlZTMzYWE2Y2YwNTRkMWJmODZkYTI3NWViODIyYjQ4YWJmZTY1OWQ4NTYxMjFmYTE4Y2Q5OTI3In0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:43 GMT
Content-Type: image/webp
Content-Length: 26814
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "/4zKt651Vk1UQGDbuwmhhoBooJCXdNxkJ/cmr4EAqz4"
Fastly-Io-Info: ifsz=95963 idim=1268x634 ifmt=jpeg ofsz=26814 odim=640x320 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005e45e55f-0063c1ddbf-c669cc6-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z70e8
X-Storage-Object: 70e831db7e7364e94b2b3ae6e3113c881c3d8bdeab3252a09b360e146313b5c0
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 224
X-Served-By: cache-sjc10027-SJC, cache-pao17428-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649823.085385,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu62.sf2p.intern.weebly.net
www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p1_i1_w5472.jpeg?width=640&dpr=1
200 OK 40 kB URL HTTP/1.1 www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p1_i1_w5472.jpeg?width=640&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bb24609273ff530cd120de1be8cb76e7
d0d3570b319ec1dfb738662a523fbe3555484bde
ee4b11fe78fc4432b86fd7fc7fb29a7ca840bfdf69a6100b908c74a4772a57f1
GET /uploads/1/4/3/9/143904206/s267916799230486251_p1_i1_w5472.jpeg?width=640&dpr=1 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IkRaTnRnZ0Q1VVp0Ujg2Ykc1VXlcL2FBPT0iLCJ2YWx1ZSI6IkNpSnJ1Rk1WWEt2WDRLZlV0cVI2aFRjQ1VVM2c0U1wvMnkyc3VoTUhQZ1k3SEsyXC9MY2V0MThxbm9pM1wvY3lLZUxXbmhwNnUwZ0dpaVpEQXR2K1wvWE5ZOUJ5bEtWc1wvQ0FXWDBJeHE2WEE3RnhKZkJET1lZVG01QnhYWUd4TG5mTVwvIiwibWFjIjoiNjQ4YWJmNTA2MzYzZTlmMWExNjI4NmFjOTE3Mzk2YzFiZTAxNTEzOTJlMmU1NjM3NjJmYmI2NzQ5OTI0ZjZjMSJ9; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649807.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6IlJpYm5YSEk0S1JQMWlUOXJ0d3F2d0E9PSIsInZhbHVlIjoiV01KZEMybzlHMnU3NzBuZ3c2QldXZ1wvNitqTFBIVnFXVXdhQm1BSk9wQTR2eGxVcTBrbGoyZWdKUEJPbHcrUGh0XC9McGZoYXdudVwvWUh6Z1paVWVZeGpVQ0FIVTZTb1dRTEV4bGVBMWhQNm5kZ1Y1akx2aEV4U0Q4cDZBeW91bCsiLCJtYWMiOiJjNWEzZTBmMTFlZTMzYWE2Y2YwNTRkMWJmODZkYTI3NWViODIyYjQ4YWJmZTY1OWQ4NTYxMjFmYTE4Y2Q5OTI3In0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:43 GMT
Content-Type: image/webp
Content-Length: 39490
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "y0ADRWnsZDKv51i0lNusxQVpYQTY6tejWsCGFpD9K38"
Fastly-Io-Info: ifsz=3126684 idim=5472x3648 ifmt=jpeg ofsz=39490 odim=640x427 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005d0e4ce0-0063c1ddbf-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z2722
X-Storage-Object: 2722c4187eb696ab5c4d6b996f151dcc3572e9fa75c66ba0a4b95960e95b93ba
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 224
X-Served-By: cache-sjc10032-SJC, cache-pao17422-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649823.089718,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn141.sf2p.intern.weebly.net
www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p3_i1_w1752.jpeg?width=640&dpr=1
200 OK 33 kB URL HTTP/1.1 www.buffer1.com/uploads/1/4/3/9/143904206/s267916799230486251_p3_i1_w1752.jpeg?width=640&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x427, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0a6e27a7845fa95f21d59fd625211464
e484b56b1c2dad9293f4ef1b0c0acd8ad49ad010
1eed0336c48766a258edb5c58f10b3ac1b9d414975071afe921b9e0af59ecda8
GET /uploads/1/4/3/9/143904206/s267916799230486251_p3_i1_w1752.jpeg?width=640&dpr=1 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IkRaTnRnZ0Q1VVp0Ujg2Ykc1VXlcL2FBPT0iLCJ2YWx1ZSI6IkNpSnJ1Rk1WWEt2WDRLZlV0cVI2aFRjQ1VVM2c0U1wvMnkyc3VoTUhQZ1k3SEsyXC9MY2V0MThxbm9pM1wvY3lLZUxXbmhwNnUwZ0dpaVpEQXR2K1wvWE5ZOUJ5bEtWc1wvQ0FXWDBJeHE2WEE3RnhKZkJET1lZVG01QnhYWUd4TG5mTVwvIiwibWFjIjoiNjQ4YWJmNTA2MzYzZTlmMWExNjI4NmFjOTE3Mzk2YzFiZTAxNTEzOTJlMmU1NjM3NjJmYmI2NzQ5OTI0ZjZjMSJ9; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649807.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6IlJpYm5YSEk0S1JQMWlUOXJ0d3F2d0E9PSIsInZhbHVlIjoiV01KZEMybzlHMnU3NzBuZ3c2QldXZ1wvNitqTFBIVnFXVXdhQm1BSk9wQTR2eGxVcTBrbGoyZWdKUEJPbHcrUGh0XC9McGZoYXdudVwvWUh6Z1paVWVZeGpVQ0FIVTZTb1dRTEV4bGVBMWhQNm5kZ1Y1akx2aEV4U0Q4cDZBeW91bCsiLCJtYWMiOiJjNWEzZTBmMTFlZTMzYWE2Y2YwNTRkMWJmODZkYTI3NWViODIyYjQ4YWJmZTY1OWQ4NTYxMjFmYTE4Y2Q5OTI3In0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:43 GMT
Content-Type: image/webp
Content-Length: 33212
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "O/F1OZBx+JbiADulRHSHOEkIH8nEGzdlEaSxmUQpRVo"
Fastly-Io-Info: ifsz=285815 idim=1752x1168 ifmt=jpeg ofsz=33212 odim=640x427 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005e0c0f7a-0063c1ddbe-c699baa-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: zd191
X-Storage-Object: d19171bae937cee0110938d7c509eab83374bdd3093fe891c4059af514f8ea80
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 224
X-Served-By: cache-sjc10026-SJC, cache-pao17459-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649823.084999,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu68.sf2p.intern.weebly.net
www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/FOTO%20GOTAS%20DE%20AGUA_1668809856.jpg?width=1600&height=480&fit=cover&dpr=1
200 OK 128 kB URL HTTP/1.1 www.buffer1.com/uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/FOTO%20GOTAS%20DE%20AGUA_1668809856.jpg?width=1600&height=480&fit=cover&dpr=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1067, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 128 kB (127660 bytes)
Hash cabaca2f4a7905287429d62b553e1055
35673008fce43d47ff07b2e926c337e8f4e79203
3d0efff0902388d1fb1ed6e025506ee6fafa89f00a23a2d3795213767c9c8224
GET /uploads/b/d819dcc6c61c581633b09d79d46cbea4f2f3a22e266a7cc1fc8af8eda3cec676/FOTO%20GOTAS%20DE%20AGUA_1668809856.jpg?width=1600&height=480&fit=cover&dpr=1 HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IlRLZnNnTzR4T056MnFkYjZiazRsc3c9PSIsInZhbHVlIjoiTktnK3RFaUxkU0hYdTR3R2x0OENNazVtYXpkSTJOYlAzXC9HU0k0cHNpOTVlT3pxMnAyaGVtZ1wvc2dNTDl1M3pNYU5DVmthV29ZSGcxVUl2WXNVSmZUVjBQU2FcL0hBdHhlaXhwYTBVQm5FOFM2SnZteHk3SmxpYnEreG84RUlxb3YiLCJtYWMiOiIzNWU1ZTczMmRlY2E0NzA4NzkwNTA2ZDMyMmRiNTAxY2JjNDY2NDUyNGIyOWE1YTJmZDQ2OTc5Y2ZmOTYyZjZlIn0%3D; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649805.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6InQ3dnNSd2lcLzQ1M3pjaGZcL1pDZmp3Zz09IiwidmFsdWUiOiJXeElOZlhGdUVkbjZMeENpNCt4RG5cL3IyWWlTMUdcL1l5Y1oxV0JndHN3NDJvdFpIeUJTMDFSTUFONmNEaGE3SEVnMnhLOXRcLzZXWWNSQ0h2QWFIQTVlTzhwXC9FR3RyXC9KbzJpMFh2TjltZnJwZU1yUEIwaXpMeDNaaElsN2ZLZERVIiwibWFjIjoiNzI5MmFkYjBhMWViZDYxNmRjZGYzZjFlZmJlMDg3MWZjODYyNjgxMWE1MDBhMTU3ZGM0M2U2NjU3ZDYyNDdlYiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:42 GMT
Content-Type: image/webp
Content-Length: 127660
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "Z2uytSYjZrmqdxtXe6swpy17liD9DpXiXRrMyrgOZUE"
Fastly-Io-Info: ifsz=1809329 idim=3888x2592 ifmt=jpeg ofsz=127660 odim=1600x1067 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000005e7d3ce7-0063c1ddbe-c695612-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z9ada
X-Storage-Object: 9ada2145eafaff667f35f1135ea3db90c8a96cfa1e09746bd6a1f7438e0ddd76
Via: 1.1 varnish, 1.1 varnish
Age: 224
X-Served-By: cache-sjc10057-SJC, cache-pao17461-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1673649823.936695,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu61.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.buffer1.com/app/website/square.ico
200 OK 6.5 kB URL HTTP/1.1 www.buffer1.com/app/website/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /app/website/square.ico HTTP/1.1
Host: www.buffer1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Cookie: publishedsite-xsrf=eyJpdiI6IjlHM3I3NWhjQ0VnMUh6bTFRUFlnMVE9PSIsInZhbHVlIjoiaWs0U3JTR0R0OXRMV0tudEF5UCs2aXR6S2NzTDNCS3JHTHhjN1pMSHNJak1uTnBOQ1RkM3RxeSs0bERVT3VMaU9iYndWVVpDek5vMDVYZTJCYUdzZHZEQjJjd2puaFVYb0ZxQk5mTTk0QXlSNUk5bktuN1loOGhkbFI2N2RWd0kiLCJtYWMiOiI4MjU5MjFjNmJlN2VjYTI3MDk1MzJjN2Q3M2FjZTZhNDhjNDFjZGNhMmIwYWNkZTQyNWRmMTIwNDc2MTJhYTM4In0%3D; XSRF-TOKEN=eyJpdiI6IkRaTnRnZ0Q1VVp0Ujg2Ykc1VXlcL2FBPT0iLCJ2YWx1ZSI6IkNpSnJ1Rk1WWEt2WDRLZlV0cVI2aFRjQ1VVM2c0U1wvMnkyc3VoTUhQZ1k3SEsyXC9MY2V0MThxbm9pM1wvY3lLZUxXbmhwNnUwZ0dpaVpEQXR2K1wvWE5ZOUJ5bEtWc1wvQ0FXWDBJeHE2WEE3RnhKZkJET1lZVG01QnhYWUd4TG5mTVwvIiwibWFjIjoiNjQ4YWJmNTA2MzYzZTlmMWExNjI4NmFjOTE3Mzk2YzFiZTAxNTEzOTJlMmU1NjM3NjJmYmI2NzQ5OTI0ZjZjMSJ9; PublishedSiteSession=eyJpdiI6IjdHaWhhdDAzUGV2eUR1TmhvcStQNHc9PSIsInZhbHVlIjoibkpCVEhrTlp5bmdvOXdocHVoaWxIYlNjUFZYaHhERjdLMHRPWjE0dDVRV0ZZK0xPUzhiak51YzRXMmJ6bHVpODFxNlNzXC9kWEVjRDJDNEdsUlZzdG5UYlphMWRBQjYyMjFPZW9FSDVPendnZm1EVG1adEZnbjNiNUtwV1FiWXpoIiwibWFjIjoiMTM4MGIzMmY2MTExMGM3NTJiMTQxZjU5MDE5YTZiMjgzNmQwMTk4MTk0ZGFkYzIxY2E2OWY3MTc3YTk5ZDYxMyJ9; _snow_ses.9370=*; _snow_id.9370=e90d1928-a208-442f-b266-8e44d5bb3413.1673649803.1.1673649807.1673649803.fd649006-de7a-4283-a4d8-22ec5a301b51; _dd_s=rum=1&id=082b37e7-cda1-44ff-a137-35dda75c7b41&created=1673649803621&expire=1673650703621; websitespring-xsrf=eyJpdiI6IlJpYm5YSEk0S1JQMWlUOXJ0d3F2d0E9PSIsInZhbHVlIjoiV01KZEMybzlHMnU3NzBuZ3c2QldXZ1wvNitqTFBIVnFXVXdhQm1BSk9wQTR2eGxVcTBrbGoyZWdKUEJPbHcrUGh0XC9McGZoYXdudVwvWUh6Z1paVWVZeGpVQ0FIVTZTb1dRTEV4bGVBMWhQNm5kZ1Y1akx2aEV4U0Q4cDZBeW91bCsiLCJtYWMiOiJjNWEzZTBmMTFlZTMzYWE2Y2YwNTRkMWJmODZkYTI3NWViODIyYjQ4YWJmZTY1OWQ4NTYxMjFmYTE4Y2Q5OTI3In0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 22:43:43 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001ae6532-00628473fc-b9fbc63-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn133.sf2p.intern.weebly.net
X-Revision: 4dbdfec03c758f695c3f5c945726352c421e7217
X-Request-ID: 844beea3c308fe626ec8a70153f48d54
ocsp.digicert.com/
200 OK 471 B IP
Hash 4669afe0de71123af5785221805237a6
5c9523511bd9ff3d262f3e6a8c74bd24d78d1a75
3489a221940f7023766aadbf3eb168b4b88f1dfc0a0456c9a0d15c92e7cacba9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4909
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:43 GMT
Etag: "63c0a4b9-1d7"
Last-Modified: Fri, 13 Jan 2023 21:21:54 GMT
Server: ECS (amb/6BB6)
X-Cache: HIT
Content-Length: 471
www.editmysite.com/ajax/apps/generateMap.php?elementid=b19019c0-9393-11ed-aef9-cf233f13b953&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=70&lat=29.78961&long=-95.81392&pincolor=%234d4d4d&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1
200 OK 12 kB URL HTTP/1.1 www.editmysite.com/ajax/apps/generateMap.php?elementid=b19019c0-9393-11ed-aef9-cf233f13b953&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=70&lat=29.78961&long=-95.81392&pincolor=%234d4d4d&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (827)
Hash 5b5d13311cdf6786ca0820f7fcd05792
106498d8ecbff904bb086fa0e247492c827b33a0
0b109fe4cc6b9305c875d3e3558eb96581851d394eb9c992312c095c094df6b1
GET /ajax/apps/generateMap.php?elementid=b19019c0-9393-11ed-aef9-cf233f13b953&map=google&ineditor=0&width=auto&point=1&control=3&scalecontrol=1&height=350px&zoom=10&zoomScale=70&lat=29.78961&long=-95.81392&pincolor=%234d4d4d&pincontrastcolor=%23ffffff&styles=%5B%7B%22featureType%22%3A%22poi%22%2C%22elementType%22%3A%22labels.text%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22poi.business%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22road%22%2C%22elementType%22%3A%22labels.icon%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%2C%7B%22featureType%22%3A%22transit%22%2C%22stylers%22%3A%5B%7B%22visibility%22%3A%22off%22%7D%5D%7D%5D&touch=1&forcemapdrag=1 HTTP/1.1
Host: www.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.buffer1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 22:43:43 GMT
Server: Apache
X-Host: blu152.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 12028
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
X-W-DC: SFO
Set-Cookie: sto-id-designer=PHANBNAK; Domain=editmysite.com; Path=/
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
IP
File type ASCII text, with very long lines (2468)
Hash 6dd2e487d7bed4f52f6c8782f360f66d
957a4dd7a3c5f20fd321937f6c393e2f336b5caa
ac9497722e05759ee0654da0691ff677b8a7a9661899f3b05d780055551a3bae
GET /maps/api/js?v=3&client=gme-weeblyinc1 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 13 Jan 2023 22:43:43 GMT
expires: Fri, 13 Jan 2023 23:13:43 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53397
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=25
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.gstatic.com/mapfiles/openhand_8_8.cur
200 OK 326 B URL HTTP/2 maps.gstatic.com/mapfiles/openhand_8_8.cur
IP
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8\012- data
Hash feff9159f56cb2069041d660b484eb07
0d0a08cf25a258511957f357b89d3908f3c5e6e3
7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
GET /mapfiles/openhand_8_8.cur HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.editmysite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/bmp
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 326
date: Fri, 13 Jan 2023 22:43:44 GMT
expires: Fri, 13 Jan 2023 22:43:44 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 22:43:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.editmysite.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 184191
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
199.34.228.164
104.18.20.226
95.101.11.115
93.184.220.29