bt-10cvgbgb566gg.weeblysite.com/
302 Found 402 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ea1a6d4241aa97be3cd73728985fc5f6
38bb2f9eb9a55f257351d6620a3c4a2186a8ed12
1bdd3fabe6f4b01c71114b544c2e895f1e74ac7fbaffc0480734c698bd636da9
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET / HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 11 Nov 2022 14:58:59 GMT
Location: https://bt-10cvgbgb566gg.weeblysite.com
Set-Cookie: publishedsite-xsrf=eyJpdiI6ImV1ckhpSWZzWHBYQ0YzbEdBdXJjXC9nPT0iLCJ2YWx1ZSI6IlljS1pQNG9MN0RIeE1IVDNwRlRubzRCb29cL2JaUlRKWXpDXC84aHhLU1E4bkRsUGl6ZTVxK1hJbXRLajEybDdwTXk5RGg4aFFKVHF5ZUJCZ1wvR01UVmNKRk1FSHdyOTlESlJYcnpJbUsycHIzMTBPXC9WNjl4SEQrdWFSRmEzUWtjTyIsIm1hYyI6IjdkZWU0MTczNWUzZGQxOWE1ODNiNDc5MjlmMTI4NGEwZDNhYzYyNjQ2YWU1ODhjZTlmN2VlZDJhNWEzOTI2ZjkifQ%3D%3D; expires=Fri, 25-Nov-2022 14:58:59 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IkNIaTdcL0JobUt4dkNrcFlRbXBGVTBRPT0iLCJ2YWx1ZSI6InpkYlhWdllQblJ2MDNwQlFNSFBCK1IwSUJZUmVzWWJ0TDRnczhzdDUraW40RlpMOGN6WU9DaE0wU1ArMjN0dVJSTDYzWGl3ZTNuR0V3d0t3NXZuWlwvQXdHamZVTDJKRzRJd2xkN2VQTTRPK2pQanZoV2puMTJCWk1vcGZ3TkNNYyIsIm1hYyI6IjNlYmJiNDBjNDI0ZTU4YWE4NDQxY2RhMDczODYzOTNiNTNiOTJkMjIxNjA2MmY1MzgxMTNkZWUxZGIzYzU2NzYifQ%3D%3D; expires=Fri, 25-Nov-2022 14:58:59 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6Im44WnBUa1Q5VUw2RUxaVXZKYk0xYUE9PSIsInZhbHVlIjoiMjN3REtFWmxRWm9NUEQxQW51aHRDMUx2QlUxc1BYMmpCWlhjUjBaYWdkNVY3WnVWS3BUNmVwXC9tOEN6VFpFRUxYSE5kWGtRNlFKSDVQbnFmTnJ4cUtFWTBcLzB3bndEWUhtOGx1V1krTEF0UXYrR2lJd3kzS2RxMmpNUklkXC9wV3oiLCJtYWMiOiI2MzcyYjNkYzdhYTY1ODJhYWI3OTJjYmViNDBkYjMwYzIzZDMwMjJiNjY4ZTFlYTA1OTVmZDg3YzE2ZTc1MTZkIn0%3D; expires=Fri, 25-Nov-2022 14:58:59 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn68.sf2p.intern.weebly.net
X-Revision: d16208f095863b85cfc7749f40de2d226184c0d7
X-Request-ID: 1a16d5776efa4e410bf16701142e69eb
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12478
Expires: Fri, 11 Nov 2022 18:26:57 GMT
Date: Fri, 11 Nov 2022 14:58:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4edf853c470fcec0ab277c78527f3c2d
de93530ce15337e671c488d9fe05e7091d4956f0
b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5440
Cache-Control: max-age=162188
Content-Type: application/ocsp-response
Date: Fri, 11 Nov 2022 14:58:59 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 12:02:07 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 11 Nov 2022 14:44:02 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 897
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b57492bf85f4ae6abbd1641b17dc9ab
008e71ec05d47bf025ca64e17da2ea1bd8e71111
17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15826
Expires: Fri, 11 Nov 2022 19:22:45 GMT
Date: Fri, 11 Nov 2022 14:58:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rsU0O+9xHWMihL32/PVs6mRpWEOtsCVry9hDKAl2hR4VTbwXEHUyz7qihJnnqvN2wfp2LDWazS0=
x-amz-request-id: 5XM01EANX5KK9842
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 11 Nov 2022 14:49:51 GMT
age: 548
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 11 Nov 2022 14:58:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6ca210b1a3433fe8307f2caa2881aa30
72d2710feee066d4b3915ba4fbd224c3ccea63a4
3fff833e1c7a65580e3751663ade93cb24aa2219a5a82ac8616792c828b249bb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3630
Cache-Control: max-age=169368
Content-Type: application/ocsp-response
Date: Fri, 11 Nov 2022 14:59:00 GMT
Etag: "636e479e-1d7"
Expires: Sun, 13 Nov 2022 14:01:48 GMT
Last-Modified: Fri, 11 Nov 2022 13:01:18 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 11 Nov 2022 14:24:58 GMT
cache-control: public,max-age=3600
age: 2042
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f7ff606fbc8634c858bbc04b69f55cf6
2441de2cba649239efd0dae7a878d7ef2245c0b4
95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2568
Cache-Control: max-age=154240
Content-Type: application/ocsp-response
Date: Fri, 11 Nov 2022 14:59:00 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 09:49:40 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hFYmdF0ak7oUCHPPK3rZxQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h68kzqimb75KGEKvn0rPyJvaXCc=
bt-10cvgbgb566gg.weeblysite.com/
200 OK 8.6 kB URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (18284)
Hash 76781959552666cb41a669a8f6a2e29f
e3b168994ec547378ab12ade993043798ef7a4cd
6d54036f2b7af5de7c117f1ca386deaa0f215426d272c53e9f39ab38556bdadf
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET / HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 11 Nov 2022 14:58:54 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; expires=Fri, 25-Nov-2022 14:59:00 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9; expires=Fri, 25-Nov-2022 14:59:00 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; expires=Fri, 25-Nov-2022 14:59:00 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn142.sf2p.intern.weebly.net
X-Revision: d16208f095863b85cfc7749f40de2d226184c0d7
X-Request-ID: d73b2657cdf67e1b752269504dcb4372
Content-Encoding: gzip
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash 5c6c8d5f9db0bbe5f023cef4647a5244
f524939983a9fbd3ded4fe8fa602dc7e32fe60bb
90bd6ae8cd56c8f72f33fdebdb83dec61db6ff99082994230f3dc67227d96f27
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:01 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A8D974E2985ED000CA8A7C6A9EFE17B7B647BB7C"
Expires: Sat, 12 Nov 2022 02:00:00 GMT
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 163
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7687e3acb90db50f-OSL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash 5c6c8d5f9db0bbe5f023cef4647a5244
f524939983a9fbd3ded4fe8fa602dc7e32fe60bb
90bd6ae8cd56c8f72f33fdebdb83dec61db6ff99082994230f3dc67227d96f27
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:01 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A8D974E2985ED000CA8A7C6A9EFE17B7B647BB7C"
Expires: Sat, 12 Nov 2022 02:00:00 GMT
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 163
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7687e3acba1bb50b-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 17d83212893b7827e6e4fae35e0d608a
13cedf1058b928e5a3d33a380fddae5b5a1108b3
cf1bb3ef1227b0a57c82c5c975c99d6abd029a20f543358ca1b125706fe0ce70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102316
Date: Fri, 11 Nov 2022 14:59:02 GMT
Etag: "636d3827-1d7"
Expires: Sat, 12 Nov 2022 19:24:18 GMT
Last-Modified: Thu, 10 Nov 2022 17:43:03 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3zq9d9kgLqm0UYD0PeNXx3tHCe_Dz4Tjjy_n4mBK_NbQtIsjlNkSuw==
Age: 6075
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 17d83212893b7827e6e4fae35e0d608a
13cedf1058b928e5a3d33a380fddae5b5a1108b3
cf1bb3ef1227b0a57c82c5c975c99d6abd029a20f543358ca1b125706fe0ce70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99750
Date: Fri, 11 Nov 2022 14:59:02 GMT
Etag: "636d3827-1d7"
Expires: Sat, 12 Nov 2022 18:41:32 GMT
Last-Modified: Thu, 10 Nov 2022 17:43:03 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zWmqR_m5V-TbjCVp96j-X1mJqdjcKWTfL_A2bjI2972Tt_0_ZRxd8g==
Age: 3509
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb29db48daab83bcaed56b72093619cc
e0e0a09d729ffb1c41411419768896f1e1eb3346
08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6327
Expires: Fri, 11 Nov 2022 16:44:29 GMT
Date: Fri, 11 Nov 2022 14:59:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb29db48daab83bcaed56b72093619cc
e0e0a09d729ffb1c41411419768896f1e1eb3346
08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6327
Expires: Fri, 11 Nov 2022 16:44:29 GMT
Date: Fri, 11 Nov 2022 14:59:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5530631-4859-4685-8ab3-a5b1013cd2cb.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5530631-4859-4685-8ab3-a5b1013cd2cb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ae1fe42d639643009ccee5a7ef770fd
d43bb27911013930ed09d9609a71d737e0838556
d5fc8515f49a0b90e083f6a6025c3dc71dba286e15d5b3f841772d60d2e68fb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5530631-4859-4685-8ab3-a5b1013cd2cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11527
x-amzn-requestid: a2a00c3d-12f7-412b-ba02-6bda7aa60586
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNfYZHXhIAMFVYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687902-593d2a380bac7a567af893d3;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:18:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J8-Ix4bZI7Yiu83xhD8WF8T4bdp2kX9s_xgpBLEuufdTtHWx_TKYcw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:50:48 GMT
age: 36494
etag: "d43bb27911013930ed09d9609a71d737e0838556"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85c6f450b38f41a2fb924d6d9a9cbff8
691f59b65ca9fde4f59bbf96b37071e07351f190
c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5583
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ9Ho7IAMF5_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:18:29 GMT
age: 38433
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88c9931a009690991e73c5b37a1aa085
815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8294
x-amzn-requestid: 5dab4522-fca9-4ada-ad6f-3305c9686315
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u3H7PoAMF02g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-756c150c40fe6fff3ae7a609;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FXIS1Gr_-3RUm6WPZCVcjaefD3hehHV-IwO-ieFeUqeoPAE7vajlsg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:51 GMT
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
content-type: image/jpeg
age: 61931
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f29164fb4dd64d9ce60566fbebd40f0a
96de8f2627e1103c5e6beb5d64cdbc09f97fce82
8eba6095edfed1ee1402c050727f81b8a9942625fd1c9cbb3bac4e51ee178577
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6517
x-amzn-requestid: 7884aa37-c94f-49d4-b6a4-c6bd66026d2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxD3EeYIAMFYAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2ee5-337e8e0949f5020713fcab58;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:10:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kXRfJbLr7ErTvJIW0rjpcqxHA0zvN6XOPrszlIzXBgaJkJGWzkoyGw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 22:00:02 GMT
age: 61140
etag: "96de8f2627e1103c5e6beb5d64cdbc09f97fce82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13f7b6eea163326da8c58ae5c09efccd
e0d1ebb35a16c686eae3d31eb85ac72278459b05
13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8581
x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u1EYOIAMFncA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MhIq0Vdxah99pPo_O7gkhrq9Nekkxld2lv0955wr0yJzcP3g6LAH8g==
via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:56 GMT
age: 61926
etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e72f32944d6f03e005f7b6f3e87d8c72
5fe340bf33ac219f6a3d44810f31d0a8796c83a9
bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10671
x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJEh8GxPoAMFhPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 03:31:46 GMT
age: 41236
etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 224 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 13593f6286d97ef957f443963fe931b8
fd8712c00baba802817d2189ca3ad204ca0cdd7a
4e8bba6a89604ac9c26316b3fc9ad4429053bf28e96ea657f198f8255e564f28
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9
Content-Length: 78
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178741.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:02 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu49.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 224
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 11 Nov 2022 14:59:02 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://bt-10cvgbgb566gg.weeblysite.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Nov 2022 14:59:02 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://bt-10cvgbgb566gg.weeblysite.com
access-control-expose-headers: retry-after, x-sentry-rate-limits, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1950
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 11 Nov 2022 14:59:02 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Sat, 11 Nov 2023 14:59:02 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-10cvgbgb566gg.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bt-10cvgbgb566gg.weeblysite.com/app/website/cms/api/v1/users/143818371/customers/coordinates
200 OK 70 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/app/website/cms/api/v1/users/143818371/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9752b06c768724a72741cf9388713596
3c05993fc47e53d1edaa9c03779565a7753f3a61
1d97b677c782c9ae57c8b4dcb6afd88a8068ea3cd133a00cf1050dfe0b4d835c
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /app/website/cms/api/v1/users/143818371/customers/coordinates HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178741.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Fri, 11 Nov 2022 14:59:02 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6Ikl5Ynd5c1wvRGdGODBFUXVueTd4dDJnPT0iLCJ2YWx1ZSI6IlFXSCt6ckFqVjgzamJsa2tQRE83eER0Um9vcE1mT0EwTDk0aUdEdGNKNGhFTkRCWlIzTWhqM1VcL2MrZjBRMTNydFhrMmtwN2VSQXIrVVQ2d3U4QVZYd1JRU3ExR243UFNucXdrQytWOWgxbmVtdElZK0NVZHF6a2tNYmIyK1ZLRiIsIm1hYyI6IjFkODNlZTRlOThhMWIwZTMxYmQ3Yjg0OWIwY2ZjODFmZTM3NDhjMTVhZWQ0ZjEzNWU1OGFkNTNiOWYyNmRiNTUifQ%3D%3D; expires=Fri, 25-Nov-2022 14:59:02 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ%3D%3D; expires=Fri, 25-Nov-2022 14:59:02 GMT; Max-Age=1209600; path=/
X-Host: grn143.sf2p.intern.weebly.net
X-Revision: d16208f095863b85cfc7749f40de2d226184c0d7
X-Request-ID: 0316017d8711fd6ef2e8b42941b0348f
Content-Encoding: gzip
bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9
Content-Length: 83
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6InVcL3Z0bCt2MTY2TmJjbjI4dU1xNWh3PT0iLCJ2YWx1ZSI6IkRkWVNzNzQ4RDIyelNBam1UTU1UaVdVRE02OVhkZEZrRE1HdXdHcHNoRFFSUkEya09FSEx5YW15eWQ4TGlBbXNrSk5laDF2ZmJJRlBkbjV4bFg0VGhDTFZQbjdyaTF5Wk5zUGR5VSt3YUZnOFV0Q2xYcDQ1U3d2TG1KM0JPazFWIiwibWFjIjoiYjUwNDQ4YjJlZTNjNjBhOTI5NjMyNGQ1MDMwMDJlODM0YjVhZWFhNDFkYjBhZmZjZjk4YzQxMTFhYTM5MDk5MyJ9; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178741.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:02 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn136.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
bt-10cvgbgb566gg.weeblysite.com/uploads/b/7dfbee60-6187-11ed-a06f-c767b3412375/icon_180x180_ios_ODc1MD.png?width=180
200 OK 298 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/uploads/b/7dfbee60-6187-11ed-a06f-c767b3412375/icon_180x180_ios_ODc1MD.png?width=180
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4e290dbe32a7b60485e119a43c6f4060
ac8def4dcacbf72e805623de863ce028bfea270e
111e997dcb63c9c0d189e6e07228cd20d2f900da4d6b1f1173a605441bfeb9f6
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /uploads/b/7dfbee60-6187-11ed-a06f-c767b3412375/icon_180x180_ios_ODc1MD.png?width=180 HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178741.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661; websitespring-xsrf=eyJpdiI6Ikl5Ynd5c1wvRGdGODBFUXVueTd4dDJnPT0iLCJ2YWx1ZSI6IlFXSCt6ckFqVjgzamJsa2tQRE83eER0Um9vcE1mT0EwTDk0aUdEdGNKNGhFTkRCWlIzTWhqM1VcL2MrZjBRMTNydFhrMmtwN2VSQXIrVVQ2d3U4QVZYd1JRU3ExR243UFNucXdrQytWOWgxbmVtdElZK0NVZHF6a2tNYmIyK1ZLRiIsIm1hYyI6IjFkODNlZTRlOThhMWIwZTMxYmQ3Yjg0OWIwY2ZjODFmZTM3NDhjMTVhZWQ0ZjEzNWU1OGFkNTNiOWYyNmRiNTUifQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Nov 2022 14:59:02 GMT
Content-Type: image/webp
Content-Length: 298
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "n/8t8vTEXoztfZfBSX+fODNTkC7SPrF8gwoNtyf64hA"
Fastly-Io-Info: ifsz=609 idim=180x180 ifmt=png ofsz=298 odim=180x180 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000002e559204-00636e4af6-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z50d6
X-Storage-Object: 50d6ea027adbbf2cf8f90c85aae02638f841b4d43e096e43bbdb1917433c0c92
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10058-SJC, cache-pao17436-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1668178743.803288,VS0,VE34
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu31.sf2p.intern.weebly.net
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 170 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash e6b422b4151ab385f5dfaacf7cc7126a
629abf64d8338b3231ff776951a3a885f76fb7be
047289f9add384f6f8f14d40bb7f20bed9efd7e4a63303c0482959c3b75541ce
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2390
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 11 Nov 2022 14:59:02 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Sat, 11 Nov 2023 14:59:02 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-10cvgbgb566gg.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d29d5cd0449825a0d42aaf8be2faaced
13c639a0447c7334d9fd5de04865012ec0fb20cd
0aa43d7c70deafc59a01396d1e2371f06dc49bfdb763d4593db5f7ac9f3f0588
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3202
Cache-Control: max-age=166762
Content-Type: application/ocsp-response
Date: Fri, 11 Nov 2022 14:59:03 GMT
Etag: "636e3f1f-1d7"
Expires: Sun, 13 Nov 2022 13:18:25 GMT
Last-Modified: Fri, 11 Nov 2022 12:25:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1849
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 11 Nov 2022 14:59:03 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Sat, 11 Nov 2023 14:59:03 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-10cvgbgb566gg.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3b50865feb2c5930854cb42840126450
d41e3df2034735fe45f7233e5be9c4ebfbaf25db
044a54e78d93ff0e11813ce152c77d026302cf56a776c58c01f8ddd131b146bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3325
Cache-Control: max-age=149582
Content-Type: application/ocsp-response
Date: Fri, 11 Nov 2022 14:59:03 GMT
Etag: "636dfb88-1d7"
Expires: Sun, 13 Nov 2022 08:32:05 GMT
Last-Modified: Fri, 11 Nov 2022 07:36:40 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 80 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 49ccb1672036652093e2af110970392c
0a448340d7898a7cc714db06964c46d6db44ae74
3714771a4773e635f63ae32d648364782f11e72a0a60918baf978ebb6ec1c22d
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ==
Content-Length: 77
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178743.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661; websitespring-xsrf=eyJpdiI6Ikl5Ynd5c1wvRGdGODBFUXVueTd4dDJnPT0iLCJ2YWx1ZSI6IlFXSCt6ckFqVjgzamJsa2tQRE83eER0Um9vcE1mT0EwTDk0aUdEdGNKNGhFTkRCWlIzTWhqM1VcL2MrZjBRMTNydFhrMmtwN2VSQXIrVVQ2d3U4QVZYd1JRU3ExR243UFNucXdrQytWOWgxbmVtdElZK0NVZHF6a2tNYmIyK1ZLRiIsIm1hYyI6IjFkODNlZTRlOThhMWIwZTMxYmQ3Yjg0OWIwY2ZjODFmZTM3NDhjMTVhZWQ0ZjEzNWU1OGFkNTNiOWYyNmRiNTUifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:03 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn136.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 80
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive
Content-Type: application/json
bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ==
Content-Length: 89
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178743.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661; websitespring-xsrf=eyJpdiI6Ikl5Ynd5c1wvRGdGODBFUXVueTd4dDJnPT0iLCJ2YWx1ZSI6IlFXSCt6ckFqVjgzamJsa2tQRE83eER0Um9vcE1mT0EwTDk0aUdEdGNKNGhFTkRCWlIzTWhqM1VcL2MrZjBRMTNydFhrMmtwN2VSQXIrVVQ2d3U4QVZYd1JRU3ExR243UFNucXdrQytWOWgxbmVtdElZK0NVZHF6a2tNYmIyK1ZLRiIsIm1hYyI6IjFkODNlZTRlOThhMWIwZTMxYmQ3Yjg0OWIwY2ZjODFmZTM3NDhjMTVhZWQ0ZjEzNWU1OGFkNTNiOWYyNmRiNTUifQ%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:03 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu94.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
www.weebly.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.weebly.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
GET /favicon.ico HTTP/1.1
Host: www.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 11 Nov 2022 14:59:03 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 22:09:09 GMT
ETag: "10be-5ed2505b6eb40"
Accept-Ranges: bytes
Content-Length: 4286
X-Host: blu88.sf2p.intern.weebly.net
Vary: User-Agent
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
X-W-DC: SFO
Set-Cookie: sto-id-editor=DIGHBNAK; Domain=weebly.com; Path=/
bt-10cvgbgb566gg.weeblysite.com/uploads/b/f1c29a1389bc4b2282edc06050775e245030989f7b51869212505100f75a5a84/BT%20PAGE_1668147225.PNG?width=400
200 OK 9.2 kB URL HTTP/1.1 bt-10cvgbgb566gg.weeblysite.com/uploads/b/f1c29a1389bc4b2282edc06050775e245030989f7b51869212505100f75a5a84/BT%20PAGE_1668147225.PNG?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 78ed7401c1176d974d954b93e31f08bc
e4b4e461bfccde5f77c908858d17199bf03738a5
e8c8eb04011c6603ffc6583d4dd0b1349d28c052469e151d0b2233b5dd947d70
GET /uploads/b/f1c29a1389bc4b2282edc06050775e245030989f7b51869212505100f75a5a84/BT%20PAGE_1668147225.PNG?width=400 HTTP/1.1
Host: bt-10cvgbgb566gg.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6IlFHMDRoaXNRNWQ4bHpxZXdQK1wvNVlnPT0iLCJ2YWx1ZSI6IkdMWUo3SEtJNU51TTNTSzVRbjRQSW9FSkRqclA0XC9ac0ZwM2w5RXMxaHZzejV5RWMrd3pMWXlpa0RMR2R5Z0xxcmtFdUdVaFhINE45NkFZVE95c0N6c2JpbFJIQllVZHpxTWlraE4xNzllbmNORmRPU01rNDN2NVFWWE9YYkwrVyIsIm1hYyI6IjU3YTBmNTVmMzNkZTJjNjRlNGExMjk1OGU0MzU2MmYxOWQ1NDgyZWE4ODE0MGY4MTc2YzBjOWQxNmY5NGEwNzEifQ%3D%3D; XSRF-TOKEN=eyJpdiI6Im4wNmxhcnFXczBuczBjN3ZWVG95Y1E9PSIsInZhbHVlIjoiQVFZMUJ3MGVHblJOT1EzTmt2RGVGK1JlSjVOMmhiYUpWOGZCNUhrS2dMdkZvYVhmVFNOTEFwRzgxemxZRVBTanJ1cEtaQ205dFhcLzFoWGRLWlpaTWhHSVZ4bnBXd1c5XC84UUxVQTJRaktnN3RNUURKYVo3d2tYRURua1Rmd2VnciIsIm1hYyI6ImU3NGU1OGNmYTAzYjQzM2E5N2ZmYTFkMDY3MjQxODkzZGIwN2I4ZTNmYWNjMDY5MjcxNmI0YzU5OWM3NWM3OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImRwS2kwcEJHNkdxUGFQNU5zdmh5a2c9PSIsInZhbHVlIjoiMmlDWlBYRmlob3R0dERKbmtYUDQ5SEU5M0wzRU1cL0NFeFdtSkh4WXk4UklpY29DWXlGcndQUkM0TXNVNWFHbEVUYlNPSWxKdVJFMzNSTm5UYml1bGdLS2RMRXY4ajNOSUt0Rksyc1hoWmhBQXY5YzVZNFNuUnRTQjZUVTQzcnY1IiwibWFjIjoiOTExNmFjYWM4NTE4ZTVjMGU1Yjk5MTEyNzQyOGM1OTVkN2YxMTcyOWJhN2FlM2UxY2Q3YjBiM2JlNmRlZGM0MSJ9; _snow_ses.6c49=*; _snow_id.6c49=b5cc909d-9129-4442-a649-6345aa174e38.1668178741.1.1668178743.1668178741.4c60a7df-1bfb-408e-b4b0-b4bffbe74851; _dd_s=rum=1&id=5728d95b-4ca6-4679-991f-38d02859aac4&created=1668178741661&expire=1668179641661; websitespring-xsrf=eyJpdiI6Ikl5Ynd5c1wvRGdGODBFUXVueTd4dDJnPT0iLCJ2YWx1ZSI6IlFXSCt6ckFqVjgzamJsa2tQRE83eER0Um9vcE1mT0EwTDk0aUdEdGNKNGhFTkRCWlIzTWhqM1VcL2MrZjBRMTNydFhrMmtwN2VSQXIrVVQ2d3U4QVZYd1JRU3ExR243UFNucXdrQytWOWgxbmVtdElZK0NVZHF6a2tNYmIyK1ZLRiIsIm1hYyI6IjFkODNlZTRlOThhMWIwZTMxYmQ3Yjg0OWIwY2ZjODFmZTM3NDhjMTVhZWQ0ZjEzNWU1OGFkNTNiOWYyNmRiNTUifQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Nov 2022 14:59:03 GMT
Content-Type: image/webp
Content-Length: 9248
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "4rjUA5aQekt6Rj8eZN0oUmJrvPRErJNJlQvWG46SO9M"
Fastly-Io-Info: ifsz=13109 idim=158x158 ifmt=png ofsz=9248 odim=158x158 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000002e2668d5-00636de82d-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z8753
X-Storage-Object: 8753471b8992a414d0d9a878721a259e5559342da6dc57f14b82a512e8583efb
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2796
X-Served-By: cache-sjc10020-SJC, cache-pao17466-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 3
X-Timer: S1668178743.490346,VS0,VE0
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu61.sf2p.intern.weebly.net
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ab64ad0b-f9cf-436c-9724-6af9e4de6df3&batch_time=1668178742764
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ab64ad0b-f9cf-436c-9724-6af9e4de6df3&batch_time=1668178742764
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash af108de5b8903de4122a2f76f3044656
fcf47be2dbbb29b9c94671bdf2d4ffede7b73e43
b2a2c5edd7ee684b8b0a308ceaf3add0cfc0ac2bf3d31e9f825bdd1cc9e5eeb7
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ab64ad0b-f9cf-436c-9724-6af9e4de6df3&batch_time=1668178742764 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15730
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 11 Nov 2022 14:59:03 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=5ea6d567-6b5e-4ffa-b666-5b78a42cd0a2&batch_time=1668178742945
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=5ea6d567-6b5e-4ffa-b666-5b78a42cd0a2&batch_time=1668178742945
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 57fe28feddb08d1a85c77b5312a49d4c
cdc1fc0fe0caee7277df634cda541460fe0f32d1
1e2927a69278abe9028208021852f017818b3cf679dcf67c6447afa533750bb4
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-d16208f&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=5ea6d567-6b5e-4ffa-b666-5b78a42cd0a2&batch_time=1668178742945 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16359
Origin: https://bt-10cvgbgb566gg.weeblysite.com
Connection: keep-alive
Referer: https://bt-10cvgbgb566gg.weeblysite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Fri, 11 Nov 2022 14:59:03 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
199.34.228.97
23.36.76.226
93.184.220.29
104.18.20.226