r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5186
Expires: Mon, 07 Nov 2022 16:17:36 GMT
Date: Mon, 07 Nov 2022 14:51:10 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5341
Cache-Control: max-age=162549
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 14:51:10 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 12:00:19 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9da87241e10d3471880b807446f496fc
607d4ba3b0326e5b8db9d3d611258d6aee429f73
bfc248325e0d0630fe2e7b7626da5bbbc2f2d619b6dff962cb55844b36b09302
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1078
Cache-Control: max-age=167282
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 14:51:10 GMT
Etag: "6369019a-1d7"
Expires: Wed, 09 Nov 2022 13:19:12 GMT
Last-Modified: Mon, 07 Nov 2022 13:01:14 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12083
Expires: Mon, 07 Nov 2022 18:12:33 GMT
Date: Mon, 07 Nov 2022 14:51:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hh4wVpx8pV8eWNaagpr+1U3hmzQSU/sXrzSUQDA1d6pp3jCFLDGSvnzbXEr29hekmjU3Qo3Ux+4=
x-amz-request-id: XRTCA6QP7JWAM123
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 07 Nov 2022 14:10:54 GMT
age: 2416
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 14:51:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bt-100054.weeblysite.com/
200 OK 8.6 kB URL HTTP/1.1 bt-100054.weeblysite.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19042)
Hash b3d2289fce58045c0c17678222255827
6f0c432fe80f6f331379cfb403da6345db7f9f1c
9702f6d70a8dbc8101510d47197283567adaed9bcadc5841962597a0ee85f025
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET / HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Mon, 07 Nov 2022 14:51:10 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; expires=Mon, 21-Nov-2022 14:51:10 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ%3D%3D; expires=Mon, 21-Nov-2022 14:51:10 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; expires=Mon, 21-Nov-2022 14:51:10 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn80.sf2p.intern.weebly.net
X-Revision: 5e0dcabe426f24a6c10b465346837e68a27063dd
X-Request-ID: f371eee30d45ca7f4e777fb4eb094d73
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash e6f4643306be10417c47176a6e67306f
940a13818904add9e1cacd12610f37ba1efd7bc5
67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3113
Cache-Control: max-age=155247
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 14:51:11 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 09:58:38 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
cdn3.editmysite.com/app/website/css/site.3cb85936dcfae118d6fe.css
200 OK 24 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/site.3cb85936dcfae118d6fe.css
IP
File type Unicode text, UTF-8 text, with very long lines (64930), with no line terminators
Hash dc59297a94df3053f9b02854665b56ec
8d949205b0389a03fc6b876f8cb87ef421cef5a3
6cddfd33b4a3659d6beb72104bf2ce638974706b8a22c3de39e7f9948a73257a
GET /app/website/css/site.3cb85936dcfae118d6fe.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:52 GMT
x-rgw-object-type: Normal
etag: W/"77d3798fb0bc25f49b7d2da5083f258b"
x-amz-request-id: tx00000000000002839f320-006363d790-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1499bd9c089c611f4515556ef7fc980a150cc9ef
x-request-id: de939474500982bcd75a388efc1a001c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 345002
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667832671.154087,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23893
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.ea49b2ea9efdf8e8ea56.css
200 OK 23 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.ea49b2ea9efdf8e8ea56.css
IP
File type Unicode text, UTF-8 text, with very long lines (64270), with no line terminators
Hash 6f7f3588eb6be7ee78ad49aff2e40aad
a0a6cd819a37fd100c7b0f89d72e5074e7d2ceac
6770dee6e38cffb9502b27d113dc672f6432c0d1a1ee26a10134ee8365ef1698
GET /app/checkout/assets/checkout/css/wcko.ea49b2ea9efdf8e8ea56.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 20:55:16 GMT
x-rgw-object-type: Normal
etag: W/"802aceec0dcf59edc188bc2bb8679104"
x-amz-request-id: tx0000000000000285e7a4a-0063642b3b-c696eea-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 323543
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667832671.154358,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22847
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
IP
File type ASCII text, with very long lines (11882), with no line terminators
Hash 20a4e66f534b80396d40bbc4291b2172
d7c962996f2715d94483be2bf9b644c7185d7ec7
0f19e8ad1c9bd5ae2ae5141f31b4e491bb460558da0ac51cd402964e716880ac
GET /app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Mar 2022 18:09:33 GMT
x-rgw-object-type: Normal
etag: W/"40372ca3b0cfa19f4e5d664243108364"
x-amz-request-id: tx00000000000005ce1aaac-0062434bb9-a9f1ce7-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 1440598
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667832671.159401,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4998
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 21:36:16 GMT
etag: "635856d0-124fe"
expires: Thu, 10 Nov 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: blu69.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
age: 972749
x-served-by: cache-sjc10061-SJC, cache-bma1646-BMA
x-cache: HIT, HIT
x-cache-hits: 48, 10494
x-timer: S1667832671.170314,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.3f0c0eca1a72510e4c56.js
200 OK 25 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/runtime.3f0c0eca1a72510e4c56.js
IP
File type ASCII text, with very long lines (50951)
Hash efa298f11a3e5061bdc43e5608e92cc8
b5b872fc47b30256fff2d2f2aec16a0d64f798cf
5f810d8c9816060beeca6fea2348b11ea981c71347788b478fcca0ef6b3cf428
GET /app/website/js/runtime.3f0c0eca1a72510e4c56.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 04 Nov 2022 22:15:48 GMT
x-rgw-object-type: Normal
etag: W/"3dac57a0f561aaac06eaf77417bade12"
x-amz-request-id: tx0000000000000283aa6d3-0063658f70-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.3f0c0eca1a72510e4c56.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 3f4fb72cd8b2d8563560c81f1d986595523a85f0
x-request-id: 2d86934037a7de3dc675b9d1dab9b316
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 232355
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1667832671.168115,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24945
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash baae19071da4b2d8cc7689bb9db20ac8
186fcb0465ff514fb92f7c1da92622ee8478328c
2a3c9c459af0015eb28dce18d36e789ec663a7a4739f7d10a9e189bd05940b34
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "15FC7DB12F74E9849F99A9FE3E648CA9B54C2AFB"
Expires: Tue, 08 Nov 2022 02:00:00 GMT
Last-Modified: Mon, 07 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1153
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7666e2b35c63b4fd-OSL
cdn3.editmysite.com/app/website/js/site.17af8570a3e0d7a05668.js
200 OK 619 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/site.17af8570a3e0d7a05668.js
IP
File type ASCII text, with very long lines (50425)
Size 619 kB (618827 bytes)
Hash 7b5ad79d6230da34e5e7d64d3ab886a4
95a9426b9e8eaf3b14be7163779b8aac725aadf6
aa06a37b210ea94b4afdbbb1a2fedcc69dae4edd8ebd144e608a83fe7baddb69
GET /app/website/js/site.17af8570a3e0d7a05668.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 04 Nov 2022 22:15:48 GMT
x-rgw-object-type: Normal
etag: W/"b49d1476b4dd8fa5fff1a974bcde172b"
x-amz-request-id: tx0000000000000285820ce-0063658f73-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.17af8570a3e0d7a05668.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 3f4fb72cd8b2d8563560c81f1d986595523a85f0
x-request-id: dcb435e855a396315d4775ebbbb24223
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 232355
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667832671.170627,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 618827
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash baae19071da4b2d8cc7689bb9db20ac8
186fcb0465ff514fb92f7c1da92622ee8478328c
2a3c9c459af0015eb28dce18d36e789ec663a7a4739f7d10a9e189bd05940b34
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "15FC7DB12F74E9849F99A9FE3E648CA9B54C2AFB"
Expires: Tue, 08 Nov 2022 02:00:00 GMT
Last-Modified: Mon, 07 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1153
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7666e2b37c84b4fd-OSL
cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.53ca9472e0ab317ff2054998283c7b85.js
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.53ca9472e0ab317ff2054998283c7b85.js
IP
File type JSON data\012- , ASCII text, with very long lines (16751), with no line terminators
Hash f86ca85c5d8b26035b2cce330f512e9e
f09db896ef9f0a99a4415559aeb45760166dbb14
44db45f32a525f50b21ad6e0796fc07cc45c1470a77f7d7c34b21f362a55a5f7
GET /app/checkout/assets/checkout/imports.en.53ca9472e0ab317ff2054998283c7b85.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-100054.weeblysite.com/
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 04 Nov 2022 23:59:12 GMT
x-rgw-object-type: Normal
etag: W/"53ca9472e0ab317ff2054998283c7b85"
x-amz-request-id: tx0000000000000294d56f6-006365a7b3-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/imports.en.53ca9472e0ab317ff2054998283c7b85.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 226198
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 11
x-timer: S1667832671.291986,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3550
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
200 OK 325 B URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
IP
File type JSON data\012- , ASCII text, with very long lines (1611), with no line terminators
Hash be5c6eec9cf3e92f8df759e392e01209
e0bff726136f738e6a1fe3e991d9a64dcf46d23a
e630015425b5298e0f7db7e397850913ea94d317beba50978a9df8e8364334ae
GET /app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-100054.weeblysite.com/
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json
last-modified: Fri, 21 Oct 2022 23:07:30 GMT
etag: W/"63532632-64b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 1437381
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 10
x-timer: S1667832671.292576,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 325
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b1d8db129f4a5a689f29a4bc38382c26
a42076357b718c57e70a7c21cbe48a31b06fadb5
bc135b24ba2e363e129b5bed5424c7e208b28404a9ccccef1f88750b91af86d0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103074
Date: Mon, 07 Nov 2022 14:51:11 GMT
Etag: "6367f222-1d7"
Expires: Tue, 08 Nov 2022 19:29:05 GMT
Last-Modified: Sun, 06 Nov 2022 17:42:58 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 d1187be634e389e2e876be936bba8e74.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: vaBMASmA6v08o7vG2AeE2jerS1JfjYZK5fuUYtRDtqglp-FcotJuRg==
Age: 6367
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b1d8db129f4a5a689f29a4bc38382c26
a42076357b718c57e70a7c21cbe48a31b06fadb5
bc135b24ba2e363e129b5bed5424c7e208b28404a9ccccef1f88750b91af86d0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101743
Date: Mon, 07 Nov 2022 14:51:11 GMT
Etag: "6367f222-1d7"
Expires: Tue, 08 Nov 2022 19:06:54 GMT
Last-Modified: Sun, 06 Nov 2022 17:42:58 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 0f9abff0779787e38b3d83ae17ff6224.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: EKxZmAfRE5ZQ5yhIHM7c9AwY36gr8GPsVDewpxo6z0twhKTaGLZ-Cw==
Age: 5036
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bt-100054.weeblysite.com/
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 14:51:11 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://bt-100054.weeblysite.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1943
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 14:51:12 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Tue, 07 Nov 2023 14:51:12 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-100054.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 224 B URL HTTP/1.1 bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 13593f6286d97ef957f443963fe931b8
fd8712c00baba802817d2189ca3ad204ca0cdd7a
4e8bba6a89604ac9c26316b3fc9ad4429053bf28e96ea657f198f8255e564f28
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ==
Content-Length: 78
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832669.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:12 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn140.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 224
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-100054.weeblysite.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://bt-100054.weeblysite.com
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 14:51:12 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://bt-100054.weeblysite.com
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
bt-100054.weeblysite.com/app/website/cms/api/v1/users/143743567/customers/coordinates
200 OK 70 B URL HTTP/1.1 bt-100054.weeblysite.com/app/website/cms/api/v1/users/143743567/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9752b06c768724a72741cf9388713596
3c05993fc47e53d1edaa9c03779565a7753f3a61
1d97b677c782c9ae57c8b4dcb6afd88a8068ea3cd133a00cf1050dfe0b4d835c
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /app/website/cms/api/v1/users/143743567/customers/coordinates HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ==
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832669.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Mon, 07 Nov 2022 14:51:12 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D; expires=Mon, 21-Nov-2022 14:51:12 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; expires=Mon, 21-Nov-2022 14:51:12 GMT; Max-Age=1209600; path=/
X-Host: grn64.sf2p.intern.weebly.net
X-Revision: 5e0dcabe426f24a6c10b465346837e68a27063dd
X-Request-ID: 67d3ee750d49acaa79deddfa9f8c5ec0
Content-Encoding: gzip
bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ==
Content-Length: 83
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6IjFJZmJvXC9IYVZTdEZzeExqaFh1N2NBPT0iLCJ2YWx1ZSI6IlYzSkxGdXBTMlhHMWNkTXYrV1pwRVwvblJaMGpReE1Eem1udGlZUzhrV04xOHI0WEtwcVpJWkU3N1phNzNqcTRDRVRINFhjenIzOURcL2xcLzBcL2ZJK0cwZlE2THBKSlJxUkJxUlBZd1lEUUN3MU5EYjVybkd2Q1QxdU1yODFiSUNJNSIsIm1hYyI6ImU5Y2I1ZTUzMTY2NTRmODAyMGNhZDRmNTQ1OGMyNTJiYWI5ZWU2ODgzOGQ3ZmYwMGJlMzNjNTk3Zjg2Y2U1OTcifQ%3D%3D; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832669.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:12 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu81.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
bt-100054.weeblysite.com/uploads/b/7be49190-5c6b-11ed-93bc-f59195dbc0dd/icon_180x180_ios_NjkwNj.png?width=180
200 OK 306 B URL HTTP/1.1 bt-100054.weeblysite.com/uploads/b/7be49190-5c6b-11ed-93bc-f59195dbc0dd/icon_180x180_ios_NjkwNj.png?width=180
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d21ca82c9cd5b587c93af5ae39529914
0423a3b11c13e239d09a233764f17c08307caa0d
bc0fd604df78362b79d95d1af65858d3d940dba63d04e0d1b719f4ece0539567
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /uploads/b/7be49190-5c6b-11ed-93bc-f59195dbc0dd/icon_180x180_ios_NjkwNj.png?width=180 HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832669.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296; websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 14:51:12 GMT
Content-Type: image/webp
Content-Length: 306
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "cCSUTu9rfJfdjtilxmqPbgiExYBi6y4zwC4fT7FZt7s"
Fastly-Io-Info: ifsz=609 idim=180x180 ifmt=png ofsz=306 odim=180x180 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000002a9b083c-006369095a-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z8aa5
X-Storage-Object: 8aa5e8fc6ad90a5b0454d2da707d100cc571c6ed8b7319fd3e891a2b386e0b82
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 2857
X-Served-By: cache-sjc10028-SJC, cache-pao17432-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1667832673.670092,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn110.sf2p.intern.weebly.net
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15565
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 14:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15565
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 14:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15565
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 14:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15565
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 14:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15565
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 14:51:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: nVtRSCFPqKF3dF0E9tQ4Ojyz7CXl7OkKDm7vDfOlrH9_8axDPoEvNQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:44:34 GMT
age: 61598
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C7GYpM3mXSf0hVyGO9Zzlxa3IHXHdyPlXsvr3i0GoQnaPZF6lO-OwA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 06:28:00 GMT
age: 30192
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93aada35cf6b5ccf56d7c8c49e566a1e
349f301eab8e4cd3732e9b0fbd1675bbbe3e969b
2285236779612c298f54306c6237df079a3329daa415c3f3a9015bf2a75f99aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9331
x-amzn-requestid: d67eca4f-66a8-4366-b2d8-fb424e77b438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJb3lHQmIAMFemg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d9c9-77519cf22b23b7e00a23cacc;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:46:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3WZudCWkWvYkeVW8m51hC95KVtr_jShr8VFhI5VG42fDcPFMpSyqOw==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 22:17:05 GMT
age: 59647
etag: "349f301eab8e4cd3732e9b0fbd1675bbbe3e969b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b370c4e3b01be9fbbc3e310e6958cd55
cc22e90a0b476215f2fd864d84c9b00dded100a6
f54d90c5854b6f140b63dad3aa92bd858b8f360b8c77d50fdf344e813e9385c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11535
x-amzn-requestid: 0a1d9895-e2e3-4070-921a-736d8c6f254e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJatPGwjoAMFx8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7ee-101a7f3a2b834d0b411c9de0;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gjEERXiPH4yDHtW87u7qRDYz1A2DKKlkYXKVC3F9VshnRvhh2wSaSQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:48:52 GMT
age: 61340
etag: "cc22e90a0b476215f2fd864d84c9b00dded100a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0a079a6dfb70fb2a2d6b5aff7103f73
55ffd5d6cb8074bdbdb8d06719119021bc81aeab
196ffd4e5245355c1c5d67f49b28200630ccfe1e4ebaa7280154b7adaf39b18f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9435
x-amzn-requestid: 7c39c00f-1362-44c1-9628-749045e542b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIU9G5gIAMFzZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364ba85-57fbfb872251c37f4137b262;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:08:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GaFmcnh2vF0lCj_QPQ7SAIT_UzHHyr8UaHa-R_ifuZsX7quU0mBJ9Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 19:49:42 GMT
age: 68490
etag: "55ffd5d6cb8074bdbdb8d06719119021bc81aeab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1190aa1b3db742f1cc476e53b34479b7
7e7ba87cfbc21acc28219c68521eedd6d3f614a0
6724e0c14b11cf9ef8c2050116115e5f7985f744184a7d2e8ea4c0189bd1997d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7309
x-amzn-requestid: 0d1c4df8-769e-497b-999c-b1087d79dfe4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLIGGWHIAMFhiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672566-1745417f7ed16a0576321e03;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:26 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Jxy0K13kA9KV6V4d_-nxs7HZk7J2JgKeJFsC1NXhJI0SvEBXSuRBbQ==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 03:38:14 GMT
age: 40378
etag: "7e7ba87cfbc21acc28219c68521eedd6d3f614a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ed23b4f1cb6854398485f56a204a495f
f4fb3f89c7af4c0e852dcd30ad1793edf095a4ad
b32c6c0d6c7524e658ae0159f0cea2fd457cead1d90454d640ebdf5c40f21271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5118
Cache-Control: max-age=169148
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 14:51:12 GMT
Etag: "6368f91e-1d7"
Expires: Wed, 09 Nov 2022 13:50:20 GMT
Last-Modified: Mon, 07 Nov 2022 12:25:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2383
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 14:51:12 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Tue, 07 Nov 2023 14:51:12 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-100054.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 10a750b4c4acdeb197e30c48397eb101
50c2718f75f93e1a0e1951bf7afc6b73c5f9e1f5
b39ae1936b986f458b25289dd30d22fd4304dc306c6c0b6e7ffce5246c4ebaaf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5451
Cache-Control: max-age=152175
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 14:51:13 GMT
Etag: "6368b585-1d7"
Expires: Wed, 09 Nov 2022 09:07:28 GMT
Last-Modified: Mon, 07 Nov 2022 07:36:37 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1842
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 14:51:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2bba086-0aa6-46f5-ab66-2876bea79ece; Expires=Tue, 07 Nov 2023 14:51:13 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://bt-100054.weeblysite.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.weebly.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.weebly.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
GET /favicon.ico HTTP/1.1
Host: www.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:13 GMT
Server: Apache
Last-Modified: Thu, 03 Nov 2022 18:46:07 GMT
ETag: "10be-5ec955eb8b9c0"
Accept-Ranges: bytes
Content-Length: 4286
X-Host: blu105.sf2p.intern.weebly.net
Vary: User-Agent
Keep-Alive: timeout=10, max=61
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
X-W-DC: SFO
Set-Cookie: sto-id-editor=BGHLBNAK; Domain=weebly.com; Path=/
bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9
Content-Length: 89
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832670.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296; websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:13 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu70.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 80 B URL HTTP/1.1 bt-100054.weeblysite.com/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 49ccb1672036652093e2af110970392c
0a448340d7898a7cc714db06964c46d6db44ae74
3714771a4773e635f63ae32d648364782f11e72a0a60918baf978ebb6ec1c22d
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9
Content-Length: 77
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832670.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296; websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 14:51:13 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu81.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 80
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive
Content-Type: application/json
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=7acd6c81-23e6-4951-a44a-7761b64fe1fc&batch_time=1667832670453
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=7acd6c81-23e6-4951-a44a-7761b64fe1fc&batch_time=1667832670453
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 010e7f0e942d449781d43d64f11c950c
e57dcd4df59c2522fbc96f7142b2bafcbeca9427
824ae2e6ab677494a10c756d321042f89d39a03cb42d89ba08297a3fec8009e8
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=7acd6c81-23e6-4951-a44a-7761b64fe1fc&batch_time=1667832670453 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15901
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Mon, 07 Nov 2022 14:51:13 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=9a7705cd-16c2-42ee-9ac2-55d08dd2caea&batch_time=1667832670586
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=9a7705cd-16c2-42ee-9ac2-55d08dd2caea&batch_time=1667832670586
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e5836ad270a5c9491d34b0a115e4784
2218fed7ce53b399b7f5ce6db9aa3b45f11e7164
192e066e89ba6fc41e7e19ae905aec01c4c15160aed2108a41620dc070a52859
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-5e0dcab&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=9a7705cd-16c2-42ee-9ac2-55d08dd2caea&batch_time=1667832670586 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16168
Origin: https://bt-100054.weeblysite.com
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Mon, 07 Nov 2022 14:51:13 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
bt-100054.weeblysite.com/uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(3)_1667585741.png?width=400
200 OK 4.8 kB URL HTTP/1.1 bt-100054.weeblysite.com/uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(3)_1667585741.png?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 061ed9531a8b34ff7b2c73c8560b21c0
0c7c5480988d186bde27afd7658935ece7bf73ff
7a63f635bfc3eabd721e5d40a57876d63b98d8a9dd2471a62bcc9feda95a4061
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(3)_1667585741.png?width=400 HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832670.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296; websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 14:51:13 GMT
Content-Type: image/webp
Content-Length: 4782
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "13DOrT4uZoiyBJcZtcLdX+DyzL58adBfJHfscijnsX8"
Fastly-Io-Info: ifsz=5527 idim=225x224 ifmt=png ofsz=4782 odim=225x224 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000002b58b173-006368b961-c696eea-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: zce42
X-Storage-Object: ce42c1a4002468be6e8f63128705f6a80c19c91f8aa090b6f74b7f2b251f992c
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 4031
X-Served-By: cache-sjc10040-SJC, cache-pao17432-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1667832673.454226,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn147.sf2p.intern.weebly.net
bt-100054.weeblysite.com/uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(4)_1667585545.png?width=400
200 OK 3.5 kB URL HTTP/1.1 bt-100054.weeblysite.com/uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(4)_1667585545.png?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c94be00722a4cff1c0f4951c545dac76
3aa114406d4a5856af0f2057b75a4469e8433f34
631d48e02ba6c3025dd99f3fe93d40da56cb64313c12c82306e237e442806228
Analyzer Verdict Alert openphish BT Group plc
fortinet Phishing
GET /uploads/b/cc85eaaa6ce6b6b20fe2a7eec60165d3671a0bdcd25a779c52740186880b85d4/download%20(4)_1667585545.png?width=400 HTTP/1.1
Host: bt-100054.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Cookie: publishedsite-xsrf=eyJpdiI6ImFhNjRzYTdYXC8zbGZuY0grdW5MdkFRPT0iLCJ2YWx1ZSI6IlE3YXlwbGdXQ2V0RW83WXdSTzdNOWFpZ0UrMkpaZSs5d3h2eHc2QmZoOHlvbzJcL1B0WmFCUFk0a3UwazNEbnl5MVZrNjlyOFwvT0NHMUZyTWxLUDZDTVFVZHUwMmtcL2JnRzlxanlQcXM1UHIwTmtJdnlMOTAxTHRWMXFlQ3dQY3pNIiwibWFjIjoiOTViYTcwMjMxYTg0MjY1N2NkYzQzNzI5NjQwMDUwNzJmZjY0Y2I1NDcxYTdlOGQ2MjAwNTMyMzcyZWY4MjY3MiJ9; XSRF-TOKEN=eyJpdiI6Im43dlYzenh6VkRrK3BPcWlvQ0k4bUE9PSIsInZhbHVlIjoic2JvcnZodHpzZU53WmFwd1BvTnNYN0ZQQ0tRVjRWRVwvK1lpaWlxaG5yb2lBckVcL0pvNTkxck40NStPbFRmNHVcL3J3RzkwNGsyUEg3V0daUVhrd205TUo2c3d1SnJkbmFTXC9ZM3hMREl4OCtIOUlmbDQ2WWdtTktEcHh2N2FzdmVHIiwibWFjIjoiNDQ3N2MwN2JiZWVlZjNiYmIxMDc2YzAzNGYxYmE1NDc2OWUxZWZiODAyMzI5ZWIzMWNmMzgzNzYxM2U5YmQwNyJ9; PublishedSiteSession=eyJpdiI6IlZtNHlob0ZQM0xNRCtwOWY5RjFFaGc9PSIsInZhbHVlIjoiajNwSzJ5c0dJMkpVZHQxV3NPWTdjaVdlSWs2K29hU0g2bmRJYkltdWJLRElPcmRNVU1HTjZPa245R2VMMENoeWtDK203V1NOU0ZuWnNjNGkwc3BOaUdcL3NRYkNPSGp5V1IwZnFscnBmbkZNSzZMeEZYQTBEazRZNDJCVTZjekhLIiwibWFjIjoiN2NmY2Y3N2EwMDQyOWQwYjY2ZmY0YTc0NDg2MjAwNmYyY2UwZDM0M2UxOTVhZGRkY2VhM2RmNWY1MjMxYzE1ZiJ9; _snow_ses.d368=*; _snow_id.d368=93295b88-a88e-4677-9f2b-e5f96ec6726f.1667832669.1.1667832670.1667832669.4784705d-2d2d-42d3-8e8e-d1f4bfab36dc; _dd_s=rum=1&id=97e9a603-1e71-4f67-a3d8-8f96a4a66554&created=1667832669296&expire=1667833569296; websitespring-xsrf=eyJpdiI6IlhIaVlvdzBHRkRscDFvcjRsbjBtQlE9PSIsInZhbHVlIjoiVWVDSEFUWFJYRG1CTXczUDhGbUpJWEZENk85UzJRUFBDdHZaZUtmQ1R3NDhYZVNBc2p4MWcwczI5NDJxQ0VNQ3BQV1RLaGFVVmx4czFJR1FCZENaWmlpU3lxS2JpQXdIR0JEQ1UrTDdWWFY2M0gzOStEMXBNMGxZUlN4S2dpQjYiLCJtYWMiOiI5NGMxZTc1MDNiNzE1YTU3ZDUxOTFjMGRmMjk5NzY4ODJjNTUxNjA4YjgwZWM5NGYwMDI1YWI5OWI3Njk1ZDNjIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 14:51:13 GMT
Content-Type: image/webp
Content-Length: 3522
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "k+v6jABd+7VVM96zz822lr7456T5pFKOdwW/v9lv020"
Fastly-Io-Info: ifsz=4296 idim=225x225 ifmt=png ofsz=3522 odim=225x225 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx0000000000000055dfcd7-00632995d1-c696eea-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z6c68
X-Storage-Object: 6c68e7437c6b3916767193a12afc58668980f8d4e16fa81af8a386d6087c9d2b
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 4031
X-Served-By: cache-sjc10061-SJC, cache-pao17425-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1667832673.475278,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu90.sf2p.intern.weebly.net
cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
200 OK 0 B URL HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
IP
GET /app/website/js/vue-modules.9bc3531c7b14b533b653.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bt-100054.weeblysite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:22 GMT
x-rgw-object-type: Normal
etag: W/"be42f69ec175a01b6e195526f58dae71"
x-amz-request-id: tx00000000000002109ab7c-006356f891-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.9bc3531c7b14b533b653.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1d15aad34e0d20a973977ec67b3bf5090814a6cf
x-request-id: f2d07942d6e3e48efaf38632576a5abf
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Mon, 07 Nov 2022 14:51:11 GMT
via: 1.1 varnish
age: 389541
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667832671.167117,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72192
X-Firefox-Spdy: h2
199.34.228.97
93.184.220.29
104.18.21.226
23.36.76.226
151.101.85.46