oauthenticatio3476734.weebly.com/
200 OK 6.5 kB URL User Request GET HTTP/1.1 oauthenticatio3476734.weebly.com/
IP
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350), with CRLF, LF line terminators
Hash bbab923d8e8e706dd797a98667f67a0f
d147cf54fc4e22ca913014ba52c4b64db0e90c28
28e04af91b5de9338510666582641aa615a9b74e9e23eff7249d19f9774443fe
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET / HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Oct 2023 11:38:04 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=oauthenticatio3476734.weebly.com
language=en; expires=Mon, 13-Nov-2023 11:38:04 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"bbab923d8e8e706dd797a98667f67a0f-gzip"
Content-Encoding: gzip
X-Host: grn30.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 6516
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/fonts/Playfair_Display/font.css?2
200 OK 332 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Playfair_Display/font.css?2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 33ac78c7f738006d5627a36ac002f6c7
c3418966f5d994d8b21fbb5f741fdd6195e02257
20e66c5178a45aae1d303eadd897f14cfd757ca705ead68d4302f59e47177f8c
GET /fonts/Playfair_Display/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 17 Oct 2023 16:34:50 GMT
etag: "652eb7aa-6da"
expires: Wed, 01 Nov 2023 08:43:17 GMT
cache-control: max-age=1209600
x-host: blu145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1047288
x-served-by: cache-sjc10078-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 52, 26
x-timer: S1698665885.273050,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 332
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/jquery-1.8.3.min.js
200 OK 34 kB URL GET HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65483)
Hash 3576a6e73c9dccdbbc4a2cf8ff544ad7
06e872300088b9ba8a08427d28ed0efcdf9c6ff5
61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 17 Oct 2023 22:03:08 GMT
etag: "652f049c-16dc4"
expires: Tue, 31 Oct 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: blu68.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1081790
x-served-by: cache-sjc10032-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 72, 7318
x-timer: S1698665885.273472,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1694107548&
200 OK 33 kB URL GET HTTP/3 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1694107548&
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash cf9326df57f8fac4a5eb60e96f429d0f
8e0e2f58ecd156bd1e6d180c9120746f8e646882
9f17849278ea3971ca67fe008881f2e042351b3b0f279c38efde4f4b02ab8f75
GET /js/lang/en/stl.js?buildTime=1694107548& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 17 Oct 2023 22:02:07 GMT
etag: "652f045f-2c7eb"
expires: Wed, 01 Nov 2023 11:22:37 GMT
cache-control: max-age=1209600
x-host: grn42.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1037728
x-served-by: cache-sjc10058-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 4352, 2
x-timer: S1698665885.273773,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33051
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1698446032
200 OK 1.4 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1698446032
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3600), with no line terminators
Hash 40b81b2d52ba9d2e2c64c31ff6a24cd7
6b5689250661646ecbb841f2475f1556a113373c
e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96
GET /js/site/footerSignup.js?buildTime=1698446032 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 27 Oct 2023 22:10:44 GMT
etag: "653c3564-e10"
expires: Fri, 10 Nov 2023 22:35:50 GMT
cache-control: max-age=1209600
x-host: grn44.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 219735
x-served-by: cache-sjc1000128-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 377
x-timer: S1698665885.274452,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1372
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1694107548
200 OK 1.6 kB URL GET HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1694107548
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (13080)
Hash d486b2011da6845bc06aa2b01a977fb7
d59651b600f6e27df4f50d3aa6fe720e7e283f18
4f0b433018466685b2898c964868eadf1538e6744c4813129332cced36756807
GET /css/social-icons.css?buildtime=1694107548 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 17 Oct 2023 22:03:17 GMT
etag: W/"652f04a5-3319"
expires: Wed, 01 Nov 2023 07:31:35 GMT
cache-control: max-age=1209600
x-host: grn59.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1051590
x-served-by: cache-sjc10046-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 1097, 2
x-timer: S1698665885.279512,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1640
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1694107548
200 OK 1.2 kB URL GET HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1694107548
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3910)
Hash 1dcebbb5a1eb8b028310ceeb72a339b3
e254b7a35ac189fd1ce9cf8bd78593bebfe27d7d
865cb87de9fc4d6530edce21f0103107abae6abe45cabdff2ad9af067b3d8e0a
GET /css/old/fancybox.css?1694107548 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 27 Oct 2023 22:10:19 GMT
etag: "653c354b-f47"
expires: Sun, 12 Nov 2023 17:22:22 GMT
cache-control: max-age=1209600
x-host: blu66.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 65742
x-served-by: cache-sjc10033-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 1
x-timer: S1698665885.279118,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Montserrat/font.css?2
200 OK 276 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Montserrat/font.css?2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 91b360ae11a20a31e6a9ca60c6f6c691
ec3c5c553a20655c54b0a5577a15abe576efa9b1
cf91769ae11889ad46b8090d0d4d58a4621f2bcea35d1d8d96ea5e38ba34ee73
GET /fonts/Montserrat/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 17 Oct 2023 16:34:49 GMT
etag: "652eb7a9-354"
expires: Wed, 01 Nov 2023 09:08:45 GMT
cache-control: max-age=1209600
x-host: blu57.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1045760
x-served-by: cache-sjc1000108-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 3079
x-timer: S1698665885.280335,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 276
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Quicksand/font.css?2
200 OK 303 B URL GET HTTP/2 cdn2.editmysite.com/fonts/Quicksand/font.css?2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash 0863fbd5586a036bb5e4a15c6970a9a7
fc9d60896b5ee157ac25e8dc8994ce760faa318e
bd6b11f4c31bd84949c3ec61aae5f4d93cf0354cd8f422506ff7ec7d1be728b3
GET /fonts/Quicksand/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 27 Oct 2023 17:17:00 GMT
etag: "653bf08c-4f9"
expires: Sun, 12 Nov 2023 10:05:48 GMT
cache-control: max-age=1209600
x-host: blu92.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 91937
x-served-by: cache-sjc1000145-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 40, 3
x-timer: S1698665885.281766,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 303
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/sites.css?buildTime=1694107548
200 OK 30 kB URL GET HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1694107548
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 251fe9dd065a30efd11ccab9a9613cda
9c8bec2886368f245985ae92222349ba92ac07f7
5b6bd64c8f7d37dd7bd34e3760cfffa93a982937376e2c02708f63c35c645a07
GET /css/sites.css?buildTime=1694107548 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 19 Oct 2023 18:18:41 GMT
etag: W/"65317301-337f6"
expires: Fri, 03 Nov 2023 10:38:54 GMT
cache-control: max-age=1209600
x-host: grn90.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 867551
x-served-by: cache-sjc10045-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 8252, 1
x-timer: S1698665885.276944,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29663
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1694107548
200 OK 146 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1694107548
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32147)
Size 146 kB (146401 bytes)
Hash 0de029f7ed3fd4cbfdcef31b834138e3
224512b5c840e885cd0732822af53301681ec799
593fec175b00a1f118f77bb8ed378e857e9f1225f0fc019fcea508b27da53cf0
GET /js/site/main.js?buildTime=1694107548 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 16 Oct 2023 21:44:01 GMT
etag: "652daea1-74804"
expires: Tue, 31 Oct 2023 14:53:52 GMT
cache-control: max-age=1209600
x-host: blu24.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1111453
x-served-by: cache-sjc10078-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 25796, 1
x-timer: S1698665885.274125,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146401
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
200 OK 9.7 kB URL GET HTTP/2 cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type PNG image data, 199 x 97, 8-bit colormap, non-interlaced\012- data
Hash 6e0f7ad31bf187e0d88fc5787573ba71
14e8b85cc32a01c8901e4ac0160582d29a45e9e6
580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduBRDjRVf4aujFpQt8U1R0AZRrT0tvE8fm-z8w_U2xex-GMjAJYQnABttdWeDPxN6Xmm0qeYmzq9wQe4BBub96qvpXffxjW
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 01 Sep 2023 02:23:15 GMT
last-modified: Tue, 12 Feb 2019 18:19:08 GMT
etag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
content-type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
via: 1.1 varnish
age: 205485
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 703
x-timer: S1698665885.275916,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9677
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1694107548
200 OK 159 kB URL GET HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1694107548
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (32029)
Size 159 kB (159104 bytes)
Hash 477945f3201c7b0c701a23b373cadb2a
ac7582e7ab946ce51cb94431cb026ebe6dbce9c2
207ec261a8530654204ada78a03b0cc6c129c09bac87013c3a8bb3bedfe84be6
GET /js/site/main-customer-accounts-site.js?buildTime=1694107548 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 24 Oct 2023 23:36:31 GMT
etag: "653854ff-826d7"
expires: Wed, 08 Nov 2023 08:03:15 GMT
cache-control: max-age=1209600
x-host: blu152.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 444890
x-served-by: cache-sjc1000139-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 54, 1
x-timer: S1698665885.275721,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159104
X-Firefox-Spdy: h2
oauthenticatio3476734.weebly.com/files/main_style.css?1694680693
200 OK 7.4 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/main_style.css?1694680693
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (1061)
Hash 9592907b5656a7b77bf4db2f96b87c30
7deda9cbb1b890d62801402c531b0b9fd5770072
0979fde0fc5b152ba6be8045f2e41856eba616e7cdfc438f1605b4cfa13baf7a
GET /files/main_style.css?1694680693 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn146.sf2p.intern.weebly.net
Content-Encoding: gzip
oauthenticatio3476734.weebly.com/files/templateArtifacts.js?1694680693
200 OK 1.6 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/templateArtifacts.js?1694680693
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (1630)
Hash ae81ab7069097a055829fb9919258138
7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a
5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af
GET /files/templateArtifacts.js?1694680693 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn46.sf2p.intern.weebly.net
Content-Encoding: gzip
oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/talktalk-01_orig.png
200 OK 2.1 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/talktalk-01_orig.png
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type PNG image data, 1349 x 42, 8-bit colormap, non-interlaced\012- data
Hash 0663b1ef3197c331803082d0fdd26bce
72b694b158c4e8943d26971cbf9b5dd13a8d4c48
1e2f41ff02122f7ba8aa23a4485a9ee9a1dd282b607dac94b2c30f1c048140b1
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /uploads/1/4/6/9/146994846/talktalk-01_orig.png HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: image/png
Content-Length: 2134
Connection: keep-alive
Last-Modified: Sat, 30 Oct 2021 01:23:43 GMT
x-rgw-object-type: Normal
ETag: "0663b1ef3197c331803082d0fdd26bce"
x-amz-request-id: tx000007bc0f9770571c894-00653b9a14-db1c716-sfo1
X-Storage-Bucket: z1e2f
X-Storage-Object: 1e2f41ff02122f7ba8aa23a4485a9ee9a1dd282b607dac94b2c30f1c048140b1
X-Host: grn46.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1694107548&
200 OK 33 kB URL GET HTTP/3 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1694107548&
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65024)
Hash cf9326df57f8fac4a5eb60e96f429d0f
8e0e2f58ecd156bd1e6d180c9120746f8e646882
9f17849278ea3971ca67fe008881f2e042351b3b0f279c38efde4f4b02ab8f75
GET /js/lang/en/stl.js?buildTime=1694107548& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33051
server: nginx
content-type: application/javascript
last-modified: Tue, 17 Oct 2023 22:02:07 GMT
etag: "652f045f-2c7eb"
expires: Wed, 01 Nov 2023 11:22:37 GMT
cache-control: max-age=1209600
x-host: grn42.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:05 GMT
age: 1037729
x-served-by: cache-sjc10058-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 4352, 1
x-timer: S1698665886.953137,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
oauthenticatio3476734.weebly.com/files/theme/plugins.js?1565969634
200 OK 16 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/theme/plugins.js?1565969634
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
Hash 2b8d85f1ea01d2c3e8b962eac8d76a5c
936987a7e08daa4a916c77d86937edee42d657da
b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /files/theme/plugins.js?1565969634 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001b40535-0062847a75-b9fbc64-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: grn47.sf2p.intern.weebly.net
Content-Encoding: gzip
oauthenticatio3476734.weebly.com/files/theme/custom.js?1565969634
200 OK 1.8 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/theme/custom.js?1565969634
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
Hash 48e887857aec23f184b0aa49c18d2445
9480776eb1666cd553a80f38316c6305943e5891
0567021bc3973d113c6b0b6e68d0e9a8b53f38a7f60716c83214a133cc00139a
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /files/theme/custom.js?1565969634 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 19 Apr 2022 15:56:37 GMT
x-rgw-object-type: Normal
ETag: W/"48e887857aec23f184b0aa49c18d2445"
x-amz-request-id: tx000000000000001b96ed8-0062847f61-b9fbc64-sfo1
X-Storage-Bucket: z0567
X-Storage-Object: 0567021bc3973d113c6b0b6e68d0e9a8b53f38a7f60716c83214a133cc00139a
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/fonts/Montserrat/regular.woff2
200 OK 13 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Montserrat/regular.woff2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /fonts/Montserrat/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oauthenticatio3476734.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 12708
server: nginx
content-type: font/woff2
last-modified: Mon, 23 Oct 2023 16:46:20 GMT
etag: "6536a35c-31a4"
expires: Tue, 07 Nov 2023 12:24:23 GMT
cache-control: max-age=1209600
x-host: blu22.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
age: 515621
x-served-by: cache-sjc1000136-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 54, 219
x-timer: S1698665886.039360,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quicksand/bold.woff2
200 OK 13 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/Quicksand/bold.woff2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 13332, version 1.0\012- data
Hash c7846019d48526987e4c9295c876c89e
0f44244a3beb8fa39be0940c666f33f501f57e9a
3bc49e2ecbfb96f9f55fdbd2c9631d6e67fefffeb1e667bab4bb2b98673b828c
GET /fonts/Quicksand/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oauthenticatio3476734.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13332
server: nginx
content-type: font/woff2
last-modified: Wed, 18 Oct 2023 16:44:36 GMT
etag: "65300b74-3414"
expires: Wed, 01 Nov 2023 17:13:57 GMT
cache-control: max-age=1209600
x-host: grn77.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
age: 1016649
x-served-by: cache-sjc1000094-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 7833, 5
x-timer: S1698665886.040066,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/published/talktalk-03.png?1694680490
200 OK 29 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/published/talktalk-03.png?1694680490
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type PNG image data, 341 x 274, 8-bit/color RGBA, non-interlaced\012- data
Hash df85e0caaeaed934b8d949ea3550b75f
152e8a75bed08c40eef21ea21919e5c279e5d96f
8681f8281f15182bdd2de8efb0c62f0ede4d1a818a5c3046aaf480877cf775ab
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /uploads/1/4/6/9/146994846/published/talktalk-03.png?1694680490 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: image/png
Content-Length: 29111
Connection: keep-alive
Last-Modified: Wed, 23 Feb 2022 09:01:28 GMT
x-rgw-object-type: Normal
ETag: "df85e0caaeaed934b8d949ea3550b75f"
x-amz-request-id: tx00000507e8aa005854b69-00653d83d5-db1eedd-sfo1
X-Storage-Bucket: z8681
X-Storage-Object: 8681f8281f15182bdd2de8efb0c62f0ede4d1a818a5c3046aaf480877cf775ab
X-Host: grn152.sf2p.intern.weebly.net
Accept-Ranges: bytes
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL GET HTTP/3 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2512)
Hash 99bbe560926e583b8e99036251deb783
8d81b73ae06f664f9d9e53dd5829a799bf434491
648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25752
server: nginx
content-type: application/javascript
last-modified: Wed, 25 Oct 2023 18:15:35 GMT
etag: "65395b47-124fe"
expires: Thu, 09 Nov 2023 08:49:33 GMT
cache-control: max-age=1209600
x-host: blu154.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
age: 355712
x-served-by: cache-sjc10061-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 43, 2666
x-timer: S1698665886.160215,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1698446032
200 OK 886 B URL GET HTTP/3 cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1698446032
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2632)
Hash b09e83d2aeac55c0d3b67186cd5009ff
fa87cec84cc36fc2e70804867da24578ea331999
251a983a1b4b2cc76542aa398ae6b3499978a788860b54a8081d35d7a843303c
GET /css/free-footer-v3.css?buildtime=1698446032 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 886
server: nginx
content-type: text/css
last-modified: Fri, 27 Oct 2023 22:10:06 GMT
etag: "653c353e-a49"
expires: Fri, 10 Nov 2023 22:35:50 GMT
cache-control: max-age=1209600
x-host: grn149.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
age: 219736
x-served-by: cache-sjc1000136-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 29, 376
x-timer: S1698665886.183914,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
oauthenticatio3476734.weebly.com/files/theme/fonts/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2?1694680693
200 OK 17 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/theme/fonts/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2?1694680693
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 16560, version 2.6553\012- data
Hash 27958408325380d903e67d87768563b8
d728e699c79072f1c7b9602c771e241b8c04c8a4
83f8b8932766826c1dd3a228b48f4072586ca09f781d64e2950d9f0e235c00a0
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /files/theme/fonts/2cd55546-ec00-4af9-aeca-4a3cd186da53.woff2?1694680693 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/files/main_style.css?1694680693
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:06 GMT
Content-Type: font/woff2
Content-Length: 16561
Connection: keep-alive
Last-Modified: Fri, 30 Aug 2019 08:25:03 GMT
x-rgw-object-type: Normal
ETag: "27958408325380d903e67d87768563b8"
x-amz-request-id: tx000000000000001c3e7ae-00628487a7-b9fbc63-sfo1
X-Storage-Bucket: z83f8
X-Storage-Object: 83f8b8932766826c1dd3a228b48f4072586ca09f781d64e2950d9f0e235c00a0
X-Host: grn142.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash 94d78dfd572aa575ee6a74d45a1ea965
af24d1ee59e2fab8e97c639645185bf6fb2e2f95
3610f5a775e55049f5eb85256050607c056751d575d755ebc8ae2bf49e6e4b3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Oct 2023 11:38:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/images/landing-pages/global/logotype.svg
200 OK 1.5 kB URL GET HTTP/3 cdn2.editmysite.com/images/landing-pages/global/logotype.svg
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2858)
Hash bc61dcb431a14c508075eeff4f74523a
8a660156d462bfb8c40f98c40616511f5857f34e
e8fce53e602b22e525d06ba31b166bb4ff461319bc9ae53caad095d185a4d15b
GET /images/landing-pages/global/logotype.svg HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1698446032
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1488
x-guploader-uploadid: ADPycdvlXBRjqjHkytHV8oPs61xAaGFpCPqykcoaYQYl9qkCMFuPlVuiOKfuxurmcKBa3_1fPdoCpk51mI0v8fjb7KJryYDt1zga
cache-control: public, max-age=86400, s-maxage=259200
expires: Fri, 09 Jun 2023 03:08:07 GMT
last-modified: Wed, 10 Oct 2018 21:37:00 GMT
etag: "bc61dcb431a14c508075eeff4f74523a"
x-goog-generation: 1539207420450301
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3507
content-type: image/svg+xml
x-goog-hash: crc32c=vgUlyw==, md5=vGHctDGhTFCAde7/T3RSOg==
x-goog-storage-class: STANDARD
server: UploadServer
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
via: 1.1 varnish
age: 204279
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 398
x-timer: S1698665886.251127,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2
200 OK 31 kB URL GET HTTP/3 cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 30768, version 1.393\012- data
Hash 2344124773c71bf4fa4ad407e7c3a467
3394a43ab1efab8a22a1f07222f7f02a9e12cbb8
bd4d2e29f503390e4951af9232fc43780b43d349647188d8f3f600835f16afb7
GET /fonts/SQ_Market/sqmarket-medium.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oauthenticatio3476734.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 30768
server: nginx
content-type: font/woff2
last-modified: Fri, 13 Oct 2023 18:45:15 GMT
etag: "6529903b-7830"
expires: Mon, 30 Oct 2023 12:25:42 GMT
cache-control: max-age=1209600
x-host: blu66.sf2p.intern.weebly.net
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Oct 2023 11:38:06 GMT
age: 1206744
x-served-by: cache-sjc1000119-SJC, cache-bma1624-BMA
x-cache: HIT, HIT
x-cache-hits: 25, 1099
x-timer: S1698665886.326817,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 25c06ac156361c4fc787856ef550bf22
e8e3e7b89a94280b1279abdda07047c89c2daf0d
7bc2ffea96bab60c723e5f97945e00177884d7bd8713fafddc98984b2fc0633a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Oct 2023 11:38:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/published/talktalk-02.png?1694680504
200 OK 105 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/uploads/1/4/6/9/146994846/published/talktalk-02.png?1694680504
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type PNG image data, 587 x 271, 8-bit/color RGBA, non-interlaced\012- data
Size 105 kB (104734 bytes)
Hash 814992cfa75247b134f9cf4b3a7c86f5
e7126852164821e33be80bc2d25770d3908497ba
8c254e0c769f18b49dbd56426d8dedc8efe323cb6b712c452f62e57ed6e8acf9
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /uploads/1/4/6/9/146994846/published/talktalk-02.png?1694680504 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:05 GMT
Content-Type: image/png
Content-Length: 104734
Connection: keep-alive
Last-Modified: Thu, 14 Sep 2023 08:35:04 GMT
x-rgw-object-type: Normal
ETag: "814992cfa75247b134f9cf4b3a7c86f5"
x-amz-request-id: tx000002bdf8f691502dfa6-00653d84f0-db1a132-sfo1
X-Storage-Bucket: z8c25
X-Storage-Object: 8c254e0c769f18b49dbd56426d8dedc8efe323cb6b712c452f62e57ed6e8acf9
X-Host: blu82.sf2p.intern.weebly.net
Accept-Ranges: bytes
oauthenticatio3476734.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL POST HTTP/1.1 oauthenticatio3476734.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://oauthenticatio3476734.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Oct 2023 11:38:06 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn21.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=71
Connection: Keep-Alive
Content-Type: application/json
oauthenticatio3476734.weebly.com/files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1694680693
200 OK 21 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1694680693
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 20709, version 1.0\012- data
Hash 9df5efadcd24b83511f3c339178210d8
74f67081083ebd94979f50e681df20bfbdc4cd8d
0d887fc553f2b9a6488c8bbdeb38d0e70e2da58d5bb34161d32f683af096fdb8
GET /files/theme/fonts/1e9892c0-6927-4412-9874-1b82801ba47a.woff?1694680693 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/files/main_style.css?1694680693
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:06 GMT
Content-Type: font/woff
Content-Length: 20710
Connection: keep-alive
Last-Modified: Wed, 11 Dec 2019 02:22:43 GMT
x-rgw-object-type: Normal
ETag: "9df5efadcd24b83511f3c339178210d8"
x-amz-request-id: tx000000000000001cd47f1-0062849ad1-b9fbc77-sfo1
X-Storage-Bucket: z0d88
X-Storage-Object: 0d887fc553f2b9a6488c8bbdeb38d0e70e2da58d5bb34161d32f683af096fdb8
X-Host: blu63.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash b93c0e56c0bb127fd6be9999bf3d2c54
570d7400b96b19db261977db4a60e28db6aa3c21
d45ebbd12edd17dfc558f17b959e7cab8e3e77b8c472e152778e17045ad03cb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Oct 2023 11:38:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?_=1698665887031
200 OK 189 kB URL GET HTTP/2 www.google.com/recaptcha/api.js?_=1698665887031
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint13:D2:E3:B0:25:78:80:D7:35:78:09:81:0D:21:CE:31:CB:EF:DA:75
ValidityMon, 09 Oct 2023 08:11:26 GMT - Mon, 01 Jan 2024 08:11:25 GMT
File type ASCII text, with very long lines (864)
Size 189 kB (189415 bytes)
Hash 935ea87bdace27c36824c259fb973d8f
929c564acc094e9c7a1f6232729899ffac864c2f
c74d05af8d744993b90275d0dc75922529f7b69dc7061b1ebfed818ef7258875
GET /recaptcha/api.js?_=1698665887031 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Mon, 30 Oct 2023 11:38:06 GMT
date: Mon, 30 Oct 2023 11:38:06 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash b93c0e56c0bb127fd6be9999bf3d2c54
570d7400b96b19db261977db4a60e28db6aa3c21
d45ebbd12edd17dfc558f17b959e7cab8e3e77b8c472e152778e17045ad03cb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Oct 2023 11:38:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
oauthenticatio3476734.weebly.com/favicon.ico
200 OK 4.3 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/favicon.ico
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /favicon.ico HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:06 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000001b53b91-00628478b7-b9fbc29-sfo1
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: grn143.sf2p.intern.weebly.net
Accept-Ranges: bytes
oauthenticatio3476734.weebly.com/files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1694680693
200 OK 39 kB URL GET HTTP/1.1 oauthenticatio3476734.weebly.com/files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1694680693
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerDigiCert Inc
Subject*.weebly.com
FingerprintEC:EB:B0:E9:41:98:A4:F2:3D:FD:73:D6:9C:73:6B:17:5E:50:3E:C6
ValidityWed, 09 Nov 2022 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type TrueType Font data, 16 tables, 1st "GPOS", 26 names, Macintosh, Copyright \251 2004 - 2007 Linotype GmbH, www.linotype.com. All rights reserved. This font softw\012- data
Hash 98f6dacde86ebbaac7cc62b34a6e54cf
d232a9249b6f39e7d35ce6a555e070987357acc9
65032d5699bf3d4deb4313aa4d1bb8375053ac7e93dfb4bf631ce9261da20c2b
Analyzer Verdict Alert OpenPhish phishing TalkTalk Telecom Group
GET /files/theme/fonts/46cf1067-688d-4aab-b0f7-bd942af6efd8.ttf?1694680693 HTTP/1.1
Host: oauthenticatio3476734.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/files/main_style.css?1694680693
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Oct 2023 11:38:06 GMT
Content-Type: font/ttf
Content-Length: 39185
Connection: keep-alive
Last-Modified: Wed, 11 Dec 2019 02:22:44 GMT
x-rgw-object-type: Normal
ETag: "98f6dacde86ebbaac7cc62b34a6e54cf"
x-amz-request-id: tx000000000000001c88022-00628495cd-b9fbc77-sfo1
X-Storage-Bucket: z6503
X-Storage-Object: 65032d5699bf3d4deb4313aa4d1bb8375053ac7e93dfb4bf631ce9261da20c2b
X-Host: blu82.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 473 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://oauthenticatio3476734.weebly.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type ASCII text, with very long lines (689)
Size 473 kB (472856 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oauthenticatio3476734.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://oauthenticatio3476734.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 18:57:38 GMT
expires: Sat, 26 Oct 2024 18:57:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 232828
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
199.34.228.54
0.0.0.0