wellsfreefriendlymenas.weebly.com/
200 OK 8.3 kB URL User Request GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/
IP
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2439), with CRLF, LF line terminators
Hash 27d48916adc97f65299b9f918f9f9efc
5cd7d38d8d63fd1b663a5fb6dd595ad4eb70b48d
35c3c8880f0b9978d1c59e301185f7c4dde8a8372f1e0534407db8b14f19bd6f
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET / HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 02:58:19 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=wellsfreefriendlymenas.weebly.com
language=en; expires=Tue, 12-Dec-2023 02:58:19 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"27d48916adc97f65299b9f918f9f9efc-gzip"
Content-Encoding: gzip
X-Host: grn63.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 8282
Keep-Alive: timeout=10, max=61
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/fonts/Roboto/font.css?2
200 OK 366 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Roboto/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 05f181094c6a399a6a095b872fdd62a2
dcd242a26e18eaa525c20ae2bc6e32d2393664f6
926c730cd097087583d7b2eaf8cfa55fabcb061f576cfbf154be708dfe672c77
GET /fonts/Roboto/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Nov 2023 22:41:08 GMT
etag: "6552a604-a18"
expires: Tue, 28 Nov 2023 10:17:39 GMT
cache-control: max-age=1209600
x-host: grn38.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1183241
x-served-by: cache-sjc1000117-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 5195, 81
x-timer: S1701140300.068924,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 366
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Lora/font.css?2
200 OK 321 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Lora/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 428a6a35ff81f3f17d516e447cbfa606
73b876668c417277423edd1b2e1f70275f73dad3
69822a307cb14d50cb0b33dacd3ca2b281aa05ee910af0a2a969a60ab055f1aa
GET /fonts/Lora/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Nov 2023 22:41:07 GMT
etag: "6552a603-6aa"
expires: Tue, 28 Nov 2023 11:41:34 GMT
cache-control: max-age=1209600
x-host: grn47.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1178206
x-served-by: cache-sjc1000110-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 327, 131
x-timer: S1701140300.069446,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 321
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Aller/font.css?2
200 OK 128 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Aller/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash d5ea9189c7aa4ad31751901ab45591cd
b671e179d87d61028185dc1631523c60ec96398b
8b311c6b3f74a5225ad622f0524abb2e5b8f64460fdc225c886521c684228dd4
GET /fonts/Aller/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-a2"
expires: Tue, 05 Dec 2023 07:37:58 GMT
cache-control: max-age=1209600
x-host: blu127.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 588021
x-served-by: cache-sjc1000096-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 5
x-timer: S1701140300.069472,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 128
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/jquery-1.8.3.min.js
200 OK 34 kB URL GET HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65483)
Hash 3576a6e73c9dccdbbc4a2cf8ff544ad7
06e872300088b9ba8a08427d28ed0efcdf9c6ff5
61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 14 Nov 2023 16:10:11 GMT
etag: "65539be3-16dc4"
expires: Tue, 28 Nov 2023 23:08:15 GMT
cache-control: max-age=1209600
x-host: blu51.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1137005
x-served-by: cache-sjc10032-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 9112
x-timer: S1701140300.069438,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1693491140&
200 OK 33 kB URL GET HTTP/3 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1693491140&
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash 5925dea9d02b39d0e66e7ccc20371e80
79723f4fdf3c06cbc6a7b44fcc78cb1de7793be0
3b7805a3f0e4750ab90d4c40f0d1efdf11c5deb485ef9ed12b9c89b000f87f82
GET /js/lang/en/stl.js?buildTime=1693491140& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 23:09:20 GMT
etag: "6557f2a0-2c90e"
expires: Sat, 02 Dec 2023 13:26:42 GMT
cache-control: max-age=1209600
x-host: blu122.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 826297
x-served-by: cache-sjc1000127-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 116, 1
x-timer: S1701140300.069419,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33107
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1693491140
200 OK 1.2 kB URL GET HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3910)
Hash 1dcebbb5a1eb8b028310ceeb72a339b3
e254b7a35ac189fd1ce9cf8bd78593bebfe27d7d
865cb87de9fc4d6530edce21f0103107abae6abe45cabdff2ad9af067b3d8e0a
GET /css/old/fancybox.css?1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Nov 2023 22:44:48 GMT
etag: "6552a6e0-f47"
expires: Tue, 28 Nov 2023 07:24:50 GMT
cache-control: max-age=1209600
x-host: grn103.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1193610
x-served-by: cache-sjc10026-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 53, 1
x-timer: S1701140300.068992,VS0,VE3
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1701117482
200 OK 1.4 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1701117482
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3600), with no line terminators
Hash 40b81b2d52ba9d2e2c64c31ff6a24cd7
6b5689250661646ecbb841f2475f1556a113373c
e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96
GET /js/site/footerSignup.js?buildTime=1701117482 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:32 GMT
etag: "655e86a8-e10"
expires: Mon, 11 Dec 2023 20:40:27 GMT
cache-control: max-age=1209600
x-host: grn14.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 22672
x-served-by: cache-sjc1000130-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 58, 32
x-timer: S1701140300.073592,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1372
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
200 OK 9.7 kB URL GET HTTP/2 cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type PNG image data, 199 x 97, 8-bit colormap, non-interlaced\012- data
Hash 6e0f7ad31bf187e0d88fc5787573ba71
14e8b85cc32a01c8901e4ac0160582d29a45e9e6
580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduBRDjRVf4aujFpQt8U1R0AZRrT0tvE8fm-z8w_U2xex-GMjAJYQnABttdWeDPxN6Xmm0qeYmzq9wQe4BBub96qvpXffxjW
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 01 Sep 2023 02:23:15 GMT
last-modified: Tue, 12 Feb 2019 18:19:08 GMT
etag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
content-type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
via: 1.1 varnish
age: 87633
x-served-by: cache-bma1640-BMA
x-cache: HIT
x-cache-hits: 228
x-timer: S1701140300.074105,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9677
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Josefin_Sans/font.css?2
200 OK 369 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Josefin_Sans/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash fc77e6363daf1cd599f7d26233f97faf
ec1c2441c3e32c67e1413147e82d201a7d87c0be
5e14c6b4b31f0170e997c36cc818f1e6f71f24ea593245e9dcd89489d1e20146
GET /fonts/Josefin_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 13 Nov 2023 22:41:07 GMT
etag: "6552a603-a3c"
expires: Tue, 28 Nov 2023 10:48:16 GMT
cache-control: max-age=1209600
x-host: grn70.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1181403
x-served-by: cache-sjc1000125-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 22, 19
x-timer: S1701140300.076721,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 369
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Cardo/font.css?2
200 OK 305 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Cardo/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash b621d33ff4eb57e4e237b44f64ce437e
57660f253ee60dc98ebc60379d679e4981f91bb5
d90a8ca9675ad5580806ea678c90546410802a4a3d369728ac9278fd9556bd0d
GET /fonts/Cardo/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-4f2"
expires: Tue, 05 Dec 2023 14:39:51 GMT
cache-control: max-age=1209600
x-host: blu144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 562708
x-served-by: cache-sjc10056-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 2
x-timer: S1701140300.077293,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 305
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1693491140
200 OK 1.6 kB URL GET HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (13080)
Hash e63bbc1e6b6aaf4970da190648557e13
7a05707bb326a23b80a0bb9d652393ee0f8fa170
920dbdee4aaf3ff5444ed55517a042dfb2c70e4bb442a3d2b4d06065e528e95a
GET /css/social-icons.css?buildtime=1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 14 Nov 2023 16:10:22 GMT
etag: W/"65539bee-3319"
expires: Wed, 29 Nov 2023 14:42:31 GMT
cache-control: max-age=1209600
x-host: blu99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1080949
x-served-by: cache-sjc1000086-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 1
x-timer: S1701140300.076268,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1639
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Catamaran/font.css?2
200 OK 319 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Catamaran/font.css?2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash de41f611af8db993449de4bb8a61b0e7
2a96877cf54214d3b1c6f02764782b9fa7f41617
f12219b57949dd365e6cfaa9f590e6fa994067bda18950fbfe2fff95a81fe4d6
GET /fonts/Catamaran/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-6b9"
expires: Tue, 05 Dec 2023 11:34:39 GMT
cache-control: max-age=1209600
x-host: blu136.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 573821
x-served-by: cache-sjc10055-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 1
x-timer: S1701140300.077293,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 319
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/sites.css?buildTime=1693491140
200 OK 30 kB URL GET HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 251fe9dd065a30efd11ccab9a9613cda
9c8bec2886368f245985ae92222349ba92ac07f7
5b6bd64c8f7d37dd7bd34e3760cfffa93a982937376e2c02708f63c35c645a07
GET /css/sites.css?buildTime=1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 22:54:09 GMT
etag: W/"655e8691-337f6"
expires: Sat, 09 Dec 2023 04:04:17 GMT
cache-control: max-age=1209600
x-host: blu107.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 255242
x-served-by: cache-sjc10067-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 15, 1
x-timer: S1701140300.076293,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29663
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1693491140
200 OK 146 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32147)
Size 146 kB (146401 bytes)
Hash 0de029f7ed3fd4cbfdcef31b834138e3
224512b5c840e885cd0732822af53301681ec799
593fec175b00a1f118f77bb8ed378e857e9f1225f0fc019fcea508b27da53cf0
GET /js/site/main.js?buildTime=1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 14 Nov 2023 15:21:31 GMT
etag: "6553907b-74804"
expires: Tue, 28 Nov 2023 15:55:05 GMT
cache-control: max-age=1209600
x-host: grn142.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1162994
x-served-by: cache-sjc10043-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 123, 1
x-timer: S1701140300.069699,VS0,VE7
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146401
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1693491140
200 OK 159 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32029)
Size 159 kB (159104 bytes)
Hash 477945f3201c7b0c701a23b373cadb2a
ac7582e7ab946ce51cb94431cb026ebe6dbce9c2
207ec261a8530654204ada78a03b0cc6c129c09bac87013c3a8bb3bedfe84be6
GET /js/site/main-customer-accounts-site.js?buildTime=1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 14 Nov 2023 15:21:31 GMT
etag: "6553907b-826d7"
expires: Tue, 28 Nov 2023 16:28:12 GMT
cache-control: max-age=1209600
x-host: grn56.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1161008
x-served-by: cache-sjc10021-SJC, cache-bma1640-BMA
x-cache: HIT, HIT
x-cache-hits: 50, 1
x-timer: S1701140300.073564,VS0,VE6
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159104
X-Firefox-Spdy: h2
wellsfreefriendlymenas.weebly.com/files/main_style.css?1693496975
200 OK 9.6 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/files/main_style.css?1693496975
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (717)
Hash 273014c54ef9385d13689eb4e733a0d2
d6dde57ac33ac86636fcdd2683e2587087a7e965
c33397ed852dcab712f2a3cf6d9d9fef4c7548ffac4e5294f94cfec572073598
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /files/main_style.css?1693496975 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu49.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1693491140
200 OK 3.7 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1693491140
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12622), with no line terminators
Hash b6889bf0cfd5fbd322bdac1906f1bf6e
8b540420c0922ed3f8188d81c7475e1f4b63f347
c4f595f154c135e6631df3e3a986a1fdebda177a47a91cbb9e645d37a0e03311
GET /js/site/theme-plugins.js?buildTime=1693491140 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:32 GMT
etag: "655e86a8-314e"
expires: Sun, 10 Dec 2023 11:23:14 GMT
cache-control: max-age=1209600
x-host: grn18.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 142506
x-served-by: cache-sjc10078-SJC, cache-bma1640-BMA
x-cache: HIT, MISS
x-cache-hits: 32, 0
x-timer: S1701140300.070858,VS0,VE156
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3747
X-Firefox-Spdy: h2
wellsfreefriendlymenas.weebly.com/files/templateArtifacts.js?1693496975
200 OK 1.6 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/files/templateArtifacts.js?1693496975
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (1630)
Hash ae81ab7069097a055829fb9919258138
7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a
5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /files/templateArtifacts.js?1693496975 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn134.sf2p.intern.weebly.net
Content-Encoding: gzip
wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/editor/screenshot-2023-08-31-at-02-49-49-wells-fargo-financial-services-support.png?1693471878
200 OK 13 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/editor/screenshot-2023-08-31-at-02-49-49-wells-fargo-financial-services-support.png?1693471878
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 350 x 113, 8-bit/color RGB, non-interlaced\012- data
Hash 46aea906ef4e98ecea6fced7b76ef9e6
a10094a07318cc07bf8715c3460d9cd8897025ec
f35fb52cea85954569a0b412ef96c96789dc57343655783a4a3db11fdc8c0422
GET /uploads/1/4/6/8/146852477/editor/screenshot-2023-08-31-at-02-49-49-wells-fargo-financial-services-support.png?1693471878 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: image/png
Content-Length: 12860
Connection: keep-alive
Last-Modified: Thu, 31 Aug 2023 08:50:54 GMT
x-rgw-object-type: Normal
ETag: "46aea906ef4e98ecea6fced7b76ef9e6"
x-amz-request-id: tx0000049bd0bc90dae9555-0065650293-db1eedd-sfo1
X-Storage-Bucket: zf35f
X-Storage-Object: f35fb52cea85954569a0b412ef96c96789dc57343655783a4a3db11fdc8c0422
X-Host: grn134.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1693491140&
200 OK 33 kB URL GET HTTP/3 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1693491140&
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash 5925dea9d02b39d0e66e7ccc20371e80
79723f4fdf3c06cbc6a7b44fcc78cb1de7793be0
3b7805a3f0e4750ab90d4c40f0d1efdf11c5deb485ef9ed12b9c89b000f87f82
GET /js/lang/en/stl.js?buildTime=1693491140& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33107
server: nginx
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 23:09:20 GMT
etag: "6557f2a0-2c90e"
expires: Sat, 02 Dec 2023 13:26:42 GMT
cache-control: max-age=1209600
x-host: blu122.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 826297
x-served-by: cache-sjc1000127-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 116, 1
x-timer: S1701140301.651204,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/wells-fargo-e5027d3338434079a998d01691b5c6d9.png
200 OK 7.8 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/wells-fargo-e5027d3338434079a998d01691b5c6d9.png
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 200 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 42d3d2d4f6c8a2b12281d0d5272bd383
abd685ac2b4e1fab74baf33fee7d33c9cf54b322
eadc9b202fbba46957237cfe56138ba61d7ea3a74577bdc6754b538a595daf5d
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /uploads/1/4/6/8/146852477/wells-fargo-e5027d3338434079a998d01691b5c6d9.png HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: image/png
Content-Length: 7840
Connection: keep-alive
Last-Modified: Thu, 31 Aug 2023 09:07:38 GMT
x-rgw-object-type: Normal
ETag: "42d3d2d4f6c8a2b12281d0d5272bd383"
x-amz-request-id: tx00000edadc2b89ee278c3-0065044066-db1a099-sfo1
X-Storage-Bucket: zeadc
X-Storage-Object: eadc9b202fbba46957237cfe56138ba61d7ea3a74577bdc6754b538a595daf5d
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/fonts/Josefin_Sans/regular.woff2
200 OK 11 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Josefin_Sans/regular.woff2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 10892, version 1.0\012- data
Hash 9d350f6f6942c8861d13dfad74adfc29
cfe029cfd2d9f6ea109675421474bbb4920bf5bf
4a79b18e7744f210f2400940cbd7e4b7767391e833645f761b759e9a1a365af7
GET /fonts/Josefin_Sans/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10892
server: nginx
content-type: font/woff2
last-modified: Tue, 14 Nov 2023 16:06:39 GMT
etag: "65539b0f-2a8c"
expires: Wed, 29 Nov 2023 13:54:36 GMT
cache-control: max-age=1209600
x-host: blu58.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1083824
x-served-by: cache-sjc10062-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 8027, 3
x-timer: S1701140301.710042,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Lora/regular.woff2
200 OK 19 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Lora/regular.woff2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 19228, version 1.0\012- data
Hash 4de1acb111366ff5358a27c36bfff049
3e746862c43c9bf6080efa2e67985c6017013db1
df02979a78c233d4f94e6fabbf5620b730e3689c7492feb68506836d0d71417f
GET /fonts/Lora/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19228
server: nginx
content-type: font/woff2
last-modified: Fri, 17 Nov 2023 16:01:16 GMT
etag: "65578e4c-4b1c"
expires: Mon, 04 Dec 2023 11:49:30 GMT
cache-control: max-age=1209600
x-host: grn100.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 659331
x-served-by: cache-sjc1000119-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 3
x-timer: S1701140301.710213,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
wellsfreefriendlymenas.weebly.com/files/theme/custom.js?1557172909
200 OK 3.1 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/files/theme/custom.js?1557172909
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
Hash 9a4d3a18190ef2bede26423bb6604dc7
0a1412479a8a48cdbb50205a13c7bc4cb7d2bff9
82b916388ce33d61e0bb3000fe2911bed0c3cf75e09cb31441b6e61816d45159
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /files/theme/custom.js?1557172909 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 16 May 2022 20:30:15 GMT
x-rgw-object-type: Normal
ETag: W/"9a4d3a18190ef2bede26423bb6604dc7"
x-amz-request-id: tx000000000000001dcde01-006284a5e1-b9fbc7f-sfo1
X-Storage-Bucket: z82b9
X-Storage-Object: 82b916388ce33d61e0bb3000fe2911bed0c3cf75e09cb31441b6e61816d45159
X-Host: blu152.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/fonts/Lora/bold.woff2
200 OK 19 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Lora/bold.woff2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 19188, version 1.0\012- data
Hash e11506fd2abfb28d6c9ed844cc9ca385
03c49d153b54686e55a2467777ba44bc8c53505b
491eefcabd598d637352eaed5bc4293acf7518aec5396cafed85458c10dbbcd6
GET /fonts/Lora/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19188
server: nginx
content-type: font/woff2
last-modified: Mon, 13 Nov 2023 22:41:07 GMT
etag: "6552a603-4af4"
expires: Tue, 28 Nov 2023 16:34:53 GMT
cache-control: max-age=1209600
x-host: grn34.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 1160607
x-served-by: cache-sjc10070-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 405, 1
x-timer: S1701140301.713056,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Josefin_Sans/bold.woff2
200 OK 10 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Josefin_Sans/bold.woff2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 10488, version 1.0\012- data
Hash a77c9936bc5d80df905b1d5d415c9d14
569ad213ce7a362e778ef2048dfafcb3244878c4
650483f49c94c6f05181c4008dde5c6cc0adf771629aca6cffb758e24327316c
GET /fonts/Josefin_Sans/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10488
server: nginx
content-type: font/woff2
last-modified: Fri, 17 Nov 2023 16:01:16 GMT
etag: "65578e4c-28f8"
expires: Tue, 05 Dec 2023 09:17:59 GMT
cache-control: max-age=1209600
x-host: grn89.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 582020
x-served-by: cache-sjc10064-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 58, 2
x-timer: S1701140301.747479,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Josefin_Sans/italic.woff2
200 OK 12 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Josefin_Sans/italic.woff2
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 11640, version 1.0\012- data
Hash f4a9f7cca45cadeaaa7cd0e5e15dc8fe
e7cbfb65272ab68c642aa2f509f780007c488ffe
7565f50ed60df27e0c360439dfd9fc28b54b16f1de768bf476724d01c1c08bf5
GET /fonts/Josefin_Sans/italic.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11640
server: nginx
content-type: font/woff2
last-modified: Fri, 17 Nov 2023 16:01:16 GMT
etag: "65578e4c-2d78"
expires: Tue, 05 Dec 2023 07:36:50 GMT
cache-control: max-age=1209600
x-host: blu127.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 588090
x-served-by: cache-sjc1000096-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 32, 1
x-timer: S1701140301.747490,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Aller/regular.ttf
200 OK 64 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Aller/regular.ttf
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 15 names, Macintosh, type 1 string, AllerRegularDaltonMaagLtd.: Aller: 2008AllerVersion 1.00AllerDalton Maag Ltd.Aller\012- data
Hash 785388a9e6416c286ec82ff966c696fd
29c9346851baa424aa0997c904114cef47c3d466
ab65e12906b1913bd81d902d0033b7c87c7ea7e0d8d0843294a2f3539e087f32
GET /fonts/Aller/regular.ttf HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 64039
server: nginx
content-type: application/octet-stream
last-modified: Fri, 17 Nov 2023 16:01:15 GMT
etag: "65578e4b-20d24"
expires: Tue, 05 Dec 2023 14:41:27 GMT
cache-control: max-age=1209600
x-host: blu144.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 562614
x-served-by: cache-sjc10056-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 2
x-timer: S1701140301.779756,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/background-images/1279322627.png
200 OK 7.0 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/background-images/1279322627.png
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type PNG image data, 1444 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash b8838b5de78ba3a5ec3281b7ce7e75a6
7732698774c14e1e00938cad2862df51f0e44b5c
a574b505097a4f3e095d40de46b7ccb815464e8a622cfc65e8e5115d721c2c72
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /uploads/1/4/6/8/146852477/background-images/1279322627.png HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: image/png
Content-Length: 6995
Connection: keep-alive
Last-Modified: Thu, 31 Aug 2023 09:06:16 GMT
x-rgw-object-type: Normal
ETag: "b8838b5de78ba3a5ec3281b7ce7e75a6"
x-amz-request-id: tx0000027e85bfaf03cb3c9-0065267d80-db1a099-sfo1
X-Storage-Bucket: za574
X-Storage-Object: a574b505097a4f3e095d40de46b7ccb815464e8a622cfc65e8e5115d721c2c72
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
wellsfreefriendlymenas.weebly.com/files/theme/plugins.js?1557172909
200 OK 18 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/files/theme/plugins.js?1557172909
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
Hash d86334c666522e93294216386ef7e57b
8bd7d6c2d80f881827d822528b260177b010f608
b548f7d3463d55fb324b29d193d98a69dbbeef7348835c01916510410a8abe52
GET /files/theme/plugins.js?1557172909 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 19 Jan 2022 14:19:09 GMT
x-rgw-object-type: Normal
ETag: W/"d86334c666522e93294216386ef7e57b"
x-amz-request-id: tx000000000000001ff865e-006284c402-b9fbc29-sfo1
X-Storage-Bucket: zb548
X-Storage-Object: b548f7d3463d55fb324b29d193d98a69dbbeef7348835c01916510410a8abe52
X-Host: grn72.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL GET HTTP/3 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2512)
Hash 99bbe560926e583b8e99036251deb783
8d81b73ae06f664f9d9e53dd5829a799bf434491
648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25752
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:01 GMT
etag: "655e8689-124fe"
expires: Thu, 07 Dec 2023 08:49:33 GMT
cache-control: max-age=1209600
x-host: blu145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:20 GMT
age: 410927
x-served-by: cache-sjc10061-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 52, 3336
x-timer: S1701140301.990466,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1701117482
200 OK 886 B URL GET HTTP/3 cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1701117482
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2632)
Hash b09e83d2aeac55c0d3b67186cd5009ff
fa87cec84cc36fc2e70804867da24578ea331999
251a983a1b4b2cc76542aa398ae6b3499978a788860b54a8081d35d7a843303c
GET /css/free-footer-v3.css?buildtime=1701117482 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 886
server: nginx
content-type: text/css
last-modified: Wed, 22 Nov 2023 22:54:06 GMT
etag: "655e868e-a49"
expires: Mon, 11 Dec 2023 20:40:28 GMT
cache-control: max-age=1209600
x-host: grn14.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 02:58:21 GMT
age: 22673
x-served-by: cache-sjc10077-SJC, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 56, 42
x-timer: S1701140301.014072,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/published/download.jpg?1693471978
200 OK 4.1 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/uploads/1/4/6/8/146852477/published/download.jpg?1693471978
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x30, components 3\012- data
Hash 737b6173164c9b1ef5161cd6487437b0
c8b40c1efe59ee1281d2fb018b49cdb3d29380f3
841217dbfe1c773ae6aa525346e09a72e6f6a0989d730e94af226596cf1cde90
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /uploads/1/4/6/8/146852477/published/download.jpg?1693471978 HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:20 GMT
Content-Type: image/jpeg
Content-Length: 4110
Connection: keep-alive
Last-Modified: Thu, 31 Aug 2023 08:48:20 GMT
x-rgw-object-type: Normal
ETag: "737b6173164c9b1ef5161cd6487437b0"
x-amz-request-id: tx00000e9efcf33d65d017a-00655986b0-db1a132-sfo1
X-Storage-Bucket: z8412
X-Storage-Object: 841217dbfe1c773ae6aa525346e09a72e6f6a0989d730e94af226596cf1cde90
X-Host: grn72.sf2p.intern.weebly.net
Accept-Ranges: bytes
wellsfreefriendlymenas.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL POST HTTP/1.1 wellsfreefriendlymenas.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 02:58:21 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu85.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=37
Connection: Keep-Alive
Content-Type: application/json
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wellsfreefriendlymenas.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 10:46:45 GMT
expires: Mon, 25 Nov 2024 10:46:45 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 144696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
wellsfreefriendlymenas.weebly.com/favicon.ico
200 OK 4.3 kB URL GET HTTP/1.1 wellsfreefriendlymenas.weebly.com/favicon.ico
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
Fingerprint84:B4:09:67:7F:E7:D1:9F:01:07:51:96:4A:72:30:17:A4:A3:94:E6
ValiditySat, 28 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
Analyzer Verdict Alert OpenPhish phishing Wells Fargo & Company
GET /favicon.ico HTTP/1.1
Host: wellsfreefriendlymenas.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 02:58:21 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000001ad46ef-0062847663-b9fbc7f-sfo1
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.google.com/recaptcha/api.js?_=1701140304810
200 OK 850 B URL GET HTTP/2 www.google.com/recaptcha/api.js?_=1701140304810
IP
Requested by https://wellsfreefriendlymenas.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 57e10dcd72dd2953878092014eae522b
95ba7e48825c26c5d9395ef2edb73e790bce6fa7
c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59
GET /recaptcha/api.js?_=1701140304810 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wellsfreefriendlymenas.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 28 Nov 2023 02:58:21 GMT
date: Tue, 28 Nov 2023 02:58:21 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
199.34.228.54
0.0.0.0