Overview

URLsign-in-att.company.com/
IP 199.34.228.55 (United States)
ASN#27647 WEEBLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-24 07:07:52 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (18)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-23 17:26:14 UTC 35.163.1.35
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2023-01-23 17:12:05 UTC 95.101.11.115
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-01-23 23:20:18 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2023-01-23 15:59:47 UTC 35.85.214.41
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-23 17:12:20 UTC 34.117.237.239
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2023-01-23 17:12:54 UTC 104.18.21.226
sign-in-att.company.com (8) 0 2023-01-23 22:00:07 UTC 2023-01-24 06:36:03 UTC 199.34.228.55 Domain (company.com) ranked at: 356785
cdn2.editmysite.com (17) 11564 2012-10-02 18:27:39 UTC 2023-01-23 16:40:51 UTC 151.101.65.46
ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2023-01-23 17:12:03 UTC 142.250.74.3
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2023-01-23 17:13:12 UTC 23.36.76.122
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-01-23 18:22:47 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-23 17:13:12 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-23 17:21:06 UTC 34.160.144.191
www.google-analytics.com (1) 40 2012-05-21 09:41:50 UTC 2023-01-23 21:19:58 UTC 216.239.32.178
www.weebly.com (1) 21455 2012-05-21 12:40:56 UTC 2023-01-23 16:40:53 UTC 74.115.50.110
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-23 17:33:59 UTC 34.120.237.76
use.typekit.net (5) 494 2012-07-05 01:42:39 UTC 2023-01-23 17:12:33 UTC 23.36.76.122
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-01-23 22:53:41 UTC 216.58.207.228

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.
2023-01-23 2 sign-in-att.company.com/ AT&T Inc.

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-24 2 sign-in-att.company.com/ Phishing
2023-01-24 2 sign-in-att.company.com/files/theme/plugins.js?1673627446 Phishing
2023-01-24 2 sign-in-att.company.com/files/theme/custom.js?1673627446 Phishing
2023-01-24 2 sign-in-att.company.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.55
Date UQ / IDS / BL URL IP
2023-03-26 07:49:26 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2023-02-28 05:22:09 +0000 0 - 0 - 6 email-verification.company.com/ 199.34.228.55
2023-02-24 06:59:09 +0000 0 - 0 - 5 noticemaintenance897.company.com/ 199.34.228.55
2023-02-21 22:00:30 +0000 0 - 3 - 0 www.eminc.biz/ 199.34.228.55
2023-01-24 07:07:52 +0000 0 - 0 - 11 sign-in-att.company.com/ 199.34.228.55


Last 5 reports on ASN: WEEBLY
Date UQ / IDS / BL URL IP
2023-03-31 22:46:14 +0000 0 - 0 - 2 aol-108639.weeblysite.com/ 199.34.228.96
2023-03-31 22:35:46 +0000 0 - 0 - 2 yahoo-103871-108336.weeblysite.com/ 199.34.228.97
2023-03-31 21:47:09 +0000 0 - 0 - 5 aol-106177.weeblysite.com/ 199.34.228.97
2023-03-31 19:43:50 +0000 0 - 0 - 0 assistanthac.weebly.com/copy-files-to-rdp-roy (...) 199.34.228.53
2023-03-31 15:53:35 +0000 0 - 0 - 2 btwebflowefhehwjw.weeblysite.com/ 199.34.228.97


Last 5 reports on domain: company.com
Date UQ / IDS / BL URL IP
2023-02-28 05:22:09 +0000 0 - 0 - 6 email-verification.company.com/ 199.34.228.55
2023-02-24 06:59:09 +0000 0 - 0 - 5 noticemaintenance897.company.com/ 199.34.228.55
2023-01-24 07:07:52 +0000 0 - 0 - 11 sign-in-att.company.com/ 199.34.228.55
2023-01-20 08:02:16 +0000 0 - 0 - 6 mail-update-2023.company.com/ 199.34.228.55
2022-12-12 18:25:49 +0000 0 - 0 - 0 mtsmail.company.com/ 199.34.228.55


No other reports with similar screenshot

JavaScript

Executed Scripts (25)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (59)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "124D9534F75506B8E8C7535EE7295AC4E6CF5A8249A0EDAC6940839E56043181"
Last-Modified: Mon, 23 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17267
Expires: Tue, 24 Jan 2023 11:55:28 GMT
Date: Tue, 24 Jan 2023 07:07:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10028
Expires: Tue, 24 Jan 2023 09:54:49 GMT
Date: Tue, 24 Jan 2023 07:07:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9750518EFD869DA5FF74BA65A196445BD4340C909157CC1A420F62C1D07224A0"
Last-Modified: Mon, 23 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7388
Expires: Tue, 24 Jan 2023 09:10:49 GMT
Date: Tue, 24 Jan 2023 07:07:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 24 Jan 2023 06:42:42 GMT
age: 1499
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 6+rn7erHnt/PG2j+Z9NUZNoP/G2D5Oz9WD9hkeF9PnyGhe8UGDTAbuUrBWVeWa0GKBX5C4Pb/9I=
x-amz-request-id: R59K58NTY8HX5V5S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 24 Jan 2023 06:19:10 GMT
age: 2911
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET / HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 24 Jan 2023 07:07:41 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=sign-in-att.company.com language=en; expires=Tue, 07-Feb-2023 07:07:41 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"3db32fbb3ab8c3c852e4ead5cdd0f08d-gzip"
Content-Encoding: gzip
X-Host: grn114.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 6402
Keep-Alive: timeout=10, max=58
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1350), with CRLF, LF line terminators
Size:   6402
Md5:    98a9fe7fdd7c4b6818de7d3a3a447643
Sha1:   3e98d2362beaa140a48473661c6fe902300ae661
Sha256: 7a72523826ecaab6e97e68c88c8daabab87e4e93c743c8e2e943829a25e565ba

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 24 Jan 2023 07:07:41 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css/old/fancybox.css?1673987310 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1218
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:22 GMT
ETag: "63c6fd66-f47"
Expires: Tue, 31 Jan 2023 20:31:41 GMT
Cache-Control: max-age=1209600
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 556560
X-Served-By: cache-sjc10053-SJC, cache-bma1675-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 32, 17
X-Timer: S1674544062.986045,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /fonts/Josefin_Sans/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 369
Server: nginx
Last-Modified: Tue, 10 Jan 2023 18:07:38 GMT
ETag: "63bda96a-a3c"
Expires: Thu, 26 Jan 2023 12:03:27 GMT
Cache-Control: max-age=1209600
X-Host: grn46.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 1019054
X-Served-By: cache-sjc10064-SJC, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 4196, 7
X-Timer: S1674544062.986368,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   369
Md5:    61972000424433036aaa2a1a70cac8cf
Sha1:   8ea702922b0e3106922bab608bbaffcac8593561
Sha256: 53be35406d06762ecd5caa4416a449d646ca5df909689cf1ef6fa70683f38ab7
                                        
                                            GET /css/social-icons.css?buildtime=1673987310 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1639
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:16 GMT
ETag: W/"63c6fd60-3319"
Expires: Tue, 31 Jan 2023 20:31:37 GMT
Cache-Control: max-age=1209600
X-Host: grn129.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 556565
X-Served-By: cache-sjc10037-SJC, cache-bma1654-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 32, 36
X-Timer: S1674544062.986531,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1639
Md5:    93353defee3a1b298721b4eab3dc258e
Sha1:   00ebd49f5c18cea1d82a1ff717cafdcfd641bcaf
Sha256: 2bdcd84a5887729b7f695523c088b3b852453a1ab0d66b295a9b72758d92bbd2
                                        
                                            GET /fonts/Quattrocento/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 278
Server: nginx
Last-Modified: Thu, 19 Jan 2023 21:10:51 GMT
ETag: "63c9b1db-358"
Expires: Mon, 06 Feb 2023 12:06:11 GMT
Cache-Control: max-age=1209600
X-Host: grn23.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 68491
X-Served-By: cache-sjc10051-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 25, 3
X-Timer: S1674544062.986939,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   278
Md5:    89f53b13b9fb642f135f7e95bb63aa1c
Sha1:   17070d03b523b9bf26fff8a2caddb4875b3c452b
Sha256: b7e57a5cab9d35e7050dc07ae397be67e0abefc881ce5027c567918281a6ec3e
                                        
                                            GET /fonts/Crimson_Text/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 331
Server: nginx
Last-Modified: Mon, 16 Jan 2023 14:57:39 GMT
ETag: "63c565e3-6ca"
Expires: Wed, 01 Feb 2023 11:34:58 GMT
Cache-Control: max-age=1209600
X-Host: blu108.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 502363
X-Served-By: cache-sjc10053-SJC, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 25, 5
X-Timer: S1674544062.986724,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   331
Md5:    297fb1dbadb800cab350a71f86f2d805
Sha1:   aac92d8de39dea8b175f55a845dbde461d1a96c1
Sha256: 42901c57766c2e03f738c5762137aec0091e7343cfdc193cd3d82fc2e53b71c9
                                        
                                            GET /css/sites.css?buildTime=1673987310 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 29746
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:16 GMT
ETag: W/"63c6fd60-347ac"
Expires: Tue, 31 Jan 2023 20:31:35 GMT
Cache-Control: max-age=1209600
X-Host: blu124.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 556566
X-Served-By: cache-sjc10067-SJC, cache-bma1633-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 14, 13
X-Timer: S1674544062.988830,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /fonts/Montserrat/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 276
Server: nginx
Last-Modified: Tue, 10 Jan 2023 18:07:38 GMT
ETag: "63bda96a-354"
Expires: Thu, 26 Jan 2023 18:07:57 GMT
Cache-Control: max-age=1209600
X-Host: blu41.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 997185
X-Served-By: cache-sjc10070-SJC, cache-bma1675-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 18, 2298
X-Timer: S1674544062.994600,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   276
Md5:    559eefb63fcae2a3f85471dd3903016a
Sha1:   5e4a9f5b529f2f6d2ee1de511231f856e673066c
Sha256: 09110f0d179c52677e2caf24d4bad70e5d717acb2eff2887ac36dbc1d9583fae
                                        
                                            GET /fonts/Lora/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 321
Server: nginx
Last-Modified: Mon, 16 Jan 2023 14:57:40 GMT
ETag: "63c565e4-6aa"
Expires: Tue, 31 Jan 2023 11:35:59 GMT
Cache-Control: max-age=1209600
X-Host: blu81.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 588703
X-Served-By: cache-sjc10034-SJC, cache-bma1654-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 20, 218
X-Timer: S1674544062.995723,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   321
Md5:    73bc8f5c36181a89bab4c7388c6e964b
Sha1:   a1489dba52342bcb09ae18bb2c71805489ac2c6a
Sha256: ffe360dfb861aaf517a2bea4dd5dcb9615073984186f2e3bd4a49b00871b776d
                                        
                                            GET /fonts/Playfair_Display/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 332
Server: nginx
Last-Modified: Tue, 10 Jan 2023 18:07:39 GMT
ETag: "63bda96b-6da"
Expires: Thu, 26 Jan 2023 18:07:15 GMT
Cache-Control: max-age=1209600
X-Host: grn144.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 997227
X-Served-By: cache-sjc10078-SJC, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1487, 5
X-Timer: S1674544062.995315,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   332
Md5:    d19ce27855300b97a4501c36fb6e1e0a
Sha1:   e7fd66d174d796dbe52e4fb2f22db19b575e5702
Sha256: f75c76daf4f88f3977cd0f6cff4ad2897497d71349cbf3c8e1e610d4bbcdab0d
                                        
                                            GET /js/lang/en/stl.js?buildTime=1673987310& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 32827
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:55:07 GMT
ETag: "63c6fd1b-2c2a4"
Expires: Tue, 31 Jan 2023 20:31:35 GMT
Cache-Control: max-age=1209600
X-Host: blu141.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 556566
X-Served-By: cache-sjc10047-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 13, 7
X-Timer: S1674544062.996591,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32827
Md5:    db51c112ec84c20205d2bb0c609b12bb
Sha1:   95145a5ca01c0c404f9143b25f22b93a15e7fa3f
Sha256: 2136f467e2f6295a5978f160521626ee3b2295ed3611e5a6750869dfe37c236e
                                        
                                            GET /js/jquery-1.8.3.min.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.65.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 10 Jan 2023 21:19:17 GMT
etag: "63bdd655-16dc4"
expires: Tue, 24 Jan 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: blu28.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 24 Jan 2023 07:07:42 GMT
age: 1151967
x-served-by: cache-sjc10032-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 23, 4240
x-timer: S1674544062.009180,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33467
Md5:    67a5a77f65f13559b3d723829f2e0108
Sha1:   5e861ec7c2993abffc3591d6132c47bc7cdc3e98
Sha256: ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
                                        
                                            GET /js/site/main.js?buildTime=1673987310 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 146400
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:39 GMT
ETag: "63c6fd77-74804"
Expires: Tue, 31 Jan 2023 20:31:36 GMT
Cache-Control: max-age=1209600
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:41 GMT
Age: 556565
X-Served-By: cache-sjc10071-SJC, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 1
X-Timer: S1674544062.996440,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32147)
Size:   146400
Md5:    81b8673c5d3aa3ab8c0574f2a8f0e3b4
Sha1:   2e0661bc7907d9e2703b3347c3fec579f0aef5d6
Sha256: 0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "4274FAB582D9CEC97C5BF8AA395DC2DDA05A717A"
Expires: Tue, 24 Jan 2023 17:00:00 GMT
Last-Modified: Tue, 24 Jan 2023 05:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1615
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78e6ef042d3cb527-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    22302366429075a9c72c20cbdb8beb3e
Sha1:   cfb056653e57f3778665c0dec30c1003f9ae5e57
Sha256: f6ff6e7fb92eb07e0efba6440aa4ce949b2a8ba1e4884598f2414dcd9407f1df
                                        
                                            GET /files/main_style.css?1674116182 HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn48.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (670)
Size:   6498
Md5:    37f3d0fbcae7b8e9b49f2812d5abc103
Sha1:   ba98fb18fa01cd45dcaa626202daa4bd98987372
Sha256: 97426c7811a4802cb417ef7191f0951cab248ea892f2f5d76760a7606946e5a4
                                        
                                            GET /files/theme/plugins.js?1673627446 HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001b6b5e9-0062847b2f-b9fbc63-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: blu84.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   15721
Md5:    43e6b0bb6eb6524188831a282f7656d7
Sha1:   44e73fe367fc1fb8efee7eefac557b7d76ef0f44
Sha256: 9001fcfe93ceab40de4bb3535fc61335318c56d4440b53070cac27a26fef42bb

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
    - fortinet: Phishing
                                        
                                            GET /fonts/Quattrocento/regular.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 35872
Server: nginx
Last-Modified: Mon, 16 Jan 2023 14:57:40 GMT
ETag: "63c565e4-8c20"
Expires: Tue, 31 Jan 2023 11:37:32 GMT
Cache-Control: max-age=1209600
X-Host: grn95.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:42 GMT
Age: 588611
X-Served-By: cache-sjc10041-SJC, cache-bma1656-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3510, 2
X-Timer: S1674544062.280989,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35872, version 1.0\012- data
Size:   35872
Md5:    62d2afa37918c2d8841c75898eadd68f
Sha1:   d6da38ee9ba1db21b7ee298f0018c2010d5ad882
Sha256: fe65e8f74381d5afc5a63c298f62b26c4b68531e9e2792e6fa63f4af24842596
                                        
                                            GET /files/theme/custom.js?1673627446 HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 17 May 2022 17:39:40 GMT
x-rgw-object-type: Normal
ETag: W/"a8cdf2852674b9b682c1be61454a75a0"
x-amz-request-id: tx000000000000001ba87e6-0062847eb5-b9fbc63-sfo1
X-Storage-Bucket: z4e2f
X-Storage-Object: 4e2f6074e5a0daab0f207bd3b9fc89b10a5383c373bfc8c54fe5dabfd48f240e
X-Host: grn39.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   1755
Md5:    17da665a1a7e21ed9787d7251b707343
Sha1:   a69b47d92bb45f5305e4325ef2782a0132d51c73
Sha256: 4958b591154a835ddda0838cde60113f9d438d0eedd71712c85044f68c806c90

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
    - fortinet: Phishing
                                        
                                            GET /uploads/1/4/4/5/144505469/att-sign-in_orig.png HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Content-Length: 3383
Connection: keep-alive
Last-Modified: Wed, 28 Dec 2022 12:08:17 GMT
x-rgw-object-type: Normal
ETag: "cb602f0e432013d0c2e5db1437f76443"
x-amz-request-id: tx000000000000065483335-0063ceb901-c696eea-sfo1
X-Storage-Bucket: z9aea
X-Storage-Object: 9aea49758605be556b8b98b82c322e6e0a0180fd0bb6215688650880cc37ac0d
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 316 x 219, 8-bit colormap, non-interlaced\012- data
Size:   3383
Md5:    cb602f0e432013d0c2e5db1437f76443
Sha1:   d05b2a564f630b05630bbb8f1da591cc849a9cf5
Sha256: 9aea49758605be556b8b98b82c322e6e0a0180fd0bb6215688650880cc37ac0d

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
                                        
                                            GET /fonts/Josefin_Sans/bold.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 10488
Server: nginx
Last-Modified: Tue, 10 Jan 2023 18:07:38 GMT
ETag: "63bda96a-28f8"
Expires: Thu, 26 Jan 2023 11:59:23 GMT
Cache-Control: max-age=1209600
X-Host: blu68.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:42 GMT
Age: 1019298
X-Served-By: cache-sjc10064-SJC, cache-bma1656-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3913, 178
X-Timer: S1674544062.292264,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10488, version 1.0\012- data
Size:   10488
Md5:    a77c9936bc5d80df905b1d5d415c9d14
Sha1:   569ad213ce7a362e778ef2048dfafcb3244878c4
Sha256: 650483f49c94c6f05181c4008dde5c6cc0adf771629aca6cffb758e24327316c
                                        
                                            GET /fonts/Josefin_Sans/regular.woff2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Connection: keep-alive
Content-Length: 10892
Server: nginx
Last-Modified: Tue, 10 Jan 2023 18:07:38 GMT
ETag: "63bda96a-2a8c"
Expires: Fri, 27 Jan 2023 10:06:04 GMT
Cache-Control: max-age=1209600
X-Host: blu105.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:42 GMT
Age: 939697
X-Served-By: cache-sjc10062-SJC, cache-bma1630-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 30, 1
X-Timer: S1674544062.293283,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10892, version 1.0\012- data
Size:   10892
Md5:    9d350f6f6942c8861d13dfad74adfc29
Sha1:   cfe029cfd2d9f6ea109675421474bbb4920bf5bf
Sha256: 4a79b18e7744f210f2400940cbd7e4b7767391e833645f761b759e9a1a365af7
                                        
                                            GET /js/wsnbn/snowday262.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 25752
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:07 GMT
ETag: "63c6fd57-124fe"
Expires: Thu, 02 Feb 2023 08:38:42 GMT
Cache-Control: max-age=1209600
X-Host: blu11.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:42 GMT
Age: 426540
X-Served-By: cache-sjc10061-SJC, cache-bma1633-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 51, 4896
X-Timer: S1674544062.352511,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (2512)
Size:   25752
Md5:    234327230add9a5a5d61a48829ea4565
Sha1:   7966cc0e4bd76f88ff193c8a99a067de804b7129
Sha256: bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
                                        
                                            GET /nxe1ajf.js HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/javascript;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6739
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2258)
Size:   6739
Md5:    9189ca8b387979d5f2feeae6aad5ee64
Sha1:   938a8a1410b1927887df90e08aca8f587fb82fec
Sha256: 0429adbc18a19bede29b164f41a4ab37e2193bb45ec37471cc361c3292536f28
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 24 Jan 2023 06:17:31 GMT
age: 3011
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/1/4/4/5/144505469/att-footer_orig.png HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Content-Length: 3929
Connection: keep-alive
Last-Modified: Wed, 28 Dec 2022 12:10:37 GMT
x-rgw-object-type: Normal
ETag: "fd6af9df9c1de52cf01022bf0805bafc"
x-amz-request-id: tx0000000000000652f46be-0063cea638-c699baa-sfo1
X-Storage-Bucket: z4f3c
X-Storage-Object: 4f3ccd717cdf81b841c7658bd19e1cd1d4f30c313e68f9d38c356dbc177ce1a7
X-Host: grn72.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1422 x 85, 8-bit colormap, non-interlaced\012- data
Size:   3929
Md5:    fd6af9df9c1de52cf01022bf0805bafc
Sha1:   320f715d71d84a2c6deb8d03fac994a2d6db1bf3
Sha256: 4f3ccd717cdf81b841c7658bd19e1cd1d4f30c313e68f9d38c356dbc177ce1a7

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
                                        
                                            GET /uploads/1/4/4/5/144505469/att-cancel_orig.png HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:42 GMT
Content-Length: 2071
Connection: keep-alive
Last-Modified: Wed, 28 Dec 2022 12:09:53 GMT
x-rgw-object-type: Normal
ETag: "3bea970279f8966749fc1c6f45a5976e"
x-amz-request-id: tx0000000000000640a0dbc-0063cc8ab9-c699baa-sfo1
X-Storage-Bucket: zd3ba
X-Storage-Object: d3ba1300115e3ee71dd825e512fa7164637ebdeb739b61300ca2e860aa97ab2b
X-Host: grn48.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 269 x 198, 8-bit colormap, non-interlaced\012- data
Size:   2071
Md5:    3bea970279f8966749fc1c6f45a5976e
Sha1:   1acc0a3406e477b639f3cfafacb3fe4f75d341d2
Sha256: d3ba1300115e3ee71dd825e512fa7164637ebdeb739b61300ca2e860aa97ab2b

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
                                        
                                            GET /recaptcha/api.js?_=1674544060775 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.228
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Tue, 24 Jan 2023 07:07:42 GMT
date: Tue, 24 Jan 2023 07:07:42 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   555
Md5:    4fcc8cffc198bb1436d5e909506b0b2a
Sha1:   a6269c7bf1d3614a78b9ba99cfec2b29e0b6ab7e
Sha256: 33b2950d981dcb3af46004be957506985ea0c185b5436fc6435efcdea7699d89
                                        
                                            GET /af/1da05b/0000000000000000000132df/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 26888
etag: "49d80c15efa35e0c65ed7e265d2c0333b309aa4e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26888, version 1.0\012- data
Size:   26888
Md5:    6c288957e1ea69636d76b434a53c65ef
Sha1:   b8e0e2074136f3b167567d532312cc0f838bdf5f
Sha256: c763917e443b5583abccb9674edfaf82deada941ad5894d28c672c632fcd64dc
                                        
                                            GET /af/32d3ee/0000000000000000000132e0/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 26568
etag: "c11943bfe7851ce643a829e2f815ebf55030b555"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26568, version 1.0\012- data
Size:   26568
Md5:    69d7f21af427ec644440343c1bcd0606
Sha1:   186c5445f00e61e82a73ce3207965ce28c410f72
Sha256: 2a1074cd5044c672760ad745fdbbd125381d63a86f5380b57a1dd28ad0da0d75
                                        
                                            GET /af/031bc7/0000000000000000000132e5/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 29052
etag: "a6e56bc1473094b110819c4cfa4169b4a97bd255"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 29052, version 1.0\012- data
Size:   29052
Md5:    3437e060c8710bccafd202e3da9a25dc
Sha1:   8e1bbee3d09332165b23156a05b43641f8d9f913
Sha256: 0656089e2e797a739897875d68a79ca62256a3c76ab3f4c31cb2f363cd778fee
                                        
                                            GET /af/099730/0000000000000000000132e6/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i9&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 27788
etag: "d76106a15ff619ce03b2c3ca28b4559b159b1b63"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 27788, version 1.0\012- data
Size:   27788
Md5:    ccc7b72fb1a80abb8cbafa94de34a554
Sha1:   0c68982548e2af3c6d6e8c49128be51e3f5dd0d1
Sha256: 3d25e0efebb8648cd1fcb31872cf5200c2e577259ad589b6e802bb1d95d03efe
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p.gif?s=1&k=nxe1ajf&ht=tk&h=sign-in-att.company.com&f=10294.10295.10304.10305&a=3024360&js=1.21.0&app=typekit&e=js&_=1674544060927 HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Tue, 24 Jan 2023 07:07:42 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    81144d75b3e69e9aa2fa3e9d83a64d03
Sha1:   f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
Sha256: 9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3166
Cache-Control: max-age=96712
Date: Tue, 24 Jan 2023 07:07:42 GMT
Etag: "63ce4e28-1d7"
Expires: Wed, 25 Jan 2023 09:59:34 GMT
Last-Modified: Mon, 23 Jan 2023 09:06:48 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: sign-in-att.company.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Cookie: is_mobile=0; language=en; _snow_ses.8a80=*; _snow_id.8a80=bef6c254-cc58-41b7-b858-1e73b241a1e0.1674544061.1.1674544061.1674544061.aace6870-680f-4f1b-b0c2-d140c2a9736e

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn73.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=65
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49

Alerts:
  Blocklists:
    - openphish: AT&T Inc.
    - fortinet: Phishing
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://sign-in-att.company.com/
Origin: http://sign-in-att.company.com
Connection: keep-alive

search
                                         35.85.214.41
HTTP/1.1 200 OK
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: http://sign-in-att.company.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, SP-Anonymous
Access-Control-Max-Age: 600

                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         216.239.32.178
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Tue, 24 Jan 2023 07:07:12 GMT
Expires: Tue, 24 Jan 2023 09:07:12 GMT
Cache-Control: public, max-age=7200
Age: 30
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/Gg72x2_SHmxi8X0BLo33HMpr/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 15:41:18 GMT
expires: Wed, 17 Jan 2024 15:41:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Jan 2023 01:02:16 GMT
age: 573984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (636)
Size:   163892
Md5:    f2995e9cc3eedf3359420fb8d714b2ca
Sha1:   bdc68875ff161b35dbe9d8d85241e41c862ec8e3
Sha256: fbe663b4f0f239aca19a5a2720c2b494ac58a53e0d68288155eb772ae04935c1
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pgL10O7zxYmmt6vLzdGk0w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.163.1.35
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JcHxUV/77vV/qSgFzJhRqbtWeWM=

                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
Content-Length: 1777
Origin: http://sign-in-att.company.com
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         35.85.214.41
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Tue, 24 Jan 2023 07:07:42 GMT
Content-Length: 2
Connection: keep-alive
Server: nginx
Set-Cookie: sp=413c29f9-b373-4b49-a5f6-598a8e52d48b; Expires=Wed, 24 Jan 2024 07:07:42 GMT; Domain=; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: http://sign-in-att.company.com
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /uploads/reseller/assets/356764895-favicon.ico HTTP/1.1 
Host: www.weebly.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         74.115.50.110
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 24 Jan 2023 07:07:43 GMT
Content-Length: 3739
Connection: keep-alive
ETag: "630fbfe7-e9b"
X-Host: blu40.sf2p.intern.weebly.net
X-W-DC: SFO


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (368)
Size:   3739
Md5:    2eeb3e560ca8f369be20ceb5858a4701
Sha1:   6c53e6b66c1bc6d0b93116e14fb79c30424bf36c
Sha256: ac2d9485acf7e9c29d94d31f19d3aedda958cd4f6119ddc888fbbde52d6078dd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "47984CE01D5A6281B9F2841CB119D3623E0D4202602F354628469E9158A2D6FA"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3687
Expires: Tue, 24 Jan 2023 08:09:11 GMT
Date: Tue, 24 Jan 2023 07:07:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "47984CE01D5A6281B9F2841CB119D3623E0D4202602F354628469E9158A2D6FA"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3687
Expires: Tue, 24 Jan 2023 08:09:11 GMT
Date: Tue, 24 Jan 2023 07:07:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "47984CE01D5A6281B9F2841CB119D3623E0D4202602F354628469E9158A2D6FA"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3687
Expires: Tue, 24 Jan 2023 08:09:11 GMT
Date: Tue, 24 Jan 2023 07:07:44 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c5YOTqrEv9RLv_lKsrC377yost8auxYRPLubBFGjIWtnbueiGMJYGw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 04:36:21 GMT
age: 9083
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12758
Md5:    7458f7a9b2070055df6f1d496794e43e
Sha1:   0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
Sha256: 373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0fe0b832-fa1d-48ac-8248-84591cfa9db0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7768
x-amzn-requestid: 1acc401a-ede6-4079-8bdc-cbee1b1bfab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH8-BF4coAMF72A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca859-32a96bef2c041ade5f0fb021;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:07:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EQdVgDJdzOOTheWCkW74fbZMHZGsmvf87nNgpanQMVWIbpYBnwCUNg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 04:27:39 GMT
age: 9605
etag: "a913fcf6f7e4250c70ea97e55d0f1cce5b144c50"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7768
Md5:    056caf4190dfd50ec8ccd4c81906a3aa
Sha1:   a913fcf6f7e4250c70ea97e55d0f1cce5b144c50
Sha256: 1747b399960d4953c1154e1185afd9429f519799ac443e486042bd64b31183ea
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F482af31b-26f9-44ae-89f6-e5d525da0b94.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6979
x-amzn-requestid: 219af615-0af6-4614-912a-a92081806773
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNyw-GPpIAMFo4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe6c-14cfd71a76ab5e5251061abf;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TFKy0afTWU8uW8Dgz1Cj11okMsTKfpBm8gx8v1ZDPg7a-lEWXaVA3g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:56:10 GMT
age: 33094
etag: "da2919e43cb4870ec1069a317a92972efeecf6a7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6979
Md5:    04af13ec975466fc3ef272576a3f152d
Sha1:   da2919e43cb4870ec1069a317a92972efeecf6a7
Sha256: 927033473cf2325ea89714abce53a15e95a0445982f974796e92d92b677e7ce5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F987410c8-c934-4399-b586-efb1a5111e3b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12102
x-amzn-requestid: 54ba881d-c54b-49fa-a5b3-20b8d80f2a35
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNyrNG1AIAMFxTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe47-1acbf1c34a4dbfdd506d3383;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ies4Oa0AiQaj9sEkpSZ-WZHMiRVYMV6IeLWDWq_G69cwBYi-RuKLGQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:08:04 GMT
age: 32380
etag: "6aae9d763dec58740cdfbfe46f6c69986b81414d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12102
Md5:    c29ea116f715297b757c81dab8d1b5f3
Sha1:   6aae9d763dec58740cdfbfe46f6c69986b81414d
Sha256: 09afde8ec60dd1471e0ce33ed11ae4542b6813ad02e2abf037629a8ae5cfe240
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8308
x-amzn-requestid: 1988d3b3-5e1a-41fd-83f5-092eddb9185f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNys5GDKoAMFdbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe52-2349fde60b7db8a34c996717;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5_1j_Z6HZ3DSGFPAACJduM5D9eAqMQT42GgI61x8dHAmPQtUexpEYQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:59:05 GMT
age: 32919
etag: "42d5b4b4a091778d98c351f0002d8656449d0243"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8308
Md5:    91b2e12a39dc4f63b9d52e8800cce1f2
Sha1:   42d5b4b4a091778d98c351f0002d8656449d0243
Sha256: d4dbc79e3383e83f861ccf8cde3e78ba427a66cd3fa99c17e23ec935867de4ad
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ad2eb2b-9cfe-4f71-89ea-99ac9e3f783f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4381
x-amzn-requestid: 528fddee-8bac-466a-8f82-3d5bffab7ca4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNzFpFghoAMFSPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefef0-63f97c8409b808910ce8f50a;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: USeM1Ot6q0_lK_EdmyYfmyH-Aklt_yek7fg9ayjlDCPS9KobKbHCjA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:56:59 GMT
age: 33045
etag: "400c6dc7973b36a5d3e43cc3b439da49ab6c76b5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4381
Md5:    462fc1946b8dbae49aa3cf22291fc707
Sha1:   400c6dc7973b36a5d3e43cc3b439da49ab6c76b5
Sha256: 88e13373963e8427baa4cdf19909eb297aafe035ec0376cbed6d4f4fa45dbd32
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1673987310 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sign-in-att.company.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 158982
Server: nginx
Last-Modified: Tue, 17 Jan 2023 19:56:39 GMT
ETag: "63c6fd77-825b0"
Expires: Tue, 31 Jan 2023 20:31:36 GMT
Cache-Control: max-age=1209600
X-Host: grn91.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 24 Jan 2023 07:07:42 GMT
Age: 556565
X-Served-By: cache-sjc10050-SJC, cache-bma1633-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 5
X-Timer: S1674544062.006239,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---