r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08e6c2a84b9de97bdd5a18a3a63ae614
7efc3c3550bf303438e0ec910f78714588f3c72b
a3bfd5d99c99a5956cf91510743a0911b300938ae2095bfbadbc7f9485b4e3b9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3BFD5D99C99A5956CF91510743A0911B300938AE2095BFBADBC7F9485B4E3B9"
Last-Modified: Sat, 29 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3831
Expires: Tue, 01 Nov 2022 13:50:41 GMT
Date: Tue, 01 Nov 2022 12:46:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 8d024a7496f85cabcc9adc118bd9fbec
a1146d4bf5c3e21619777259206bec6cad36e7ea
247b9761f543b4d13fabf86390a1580f92b2b271e1801d99b11bbb1980eefe84
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2007
Cache-Control: max-age=163058
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:50 GMT
Etag: "6360e755-1d7"
Expires: Thu, 03 Nov 2022 10:04:28 GMT
Last-Modified: Tue, 01 Nov 2022 09:31:01 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 44ee7bbc64b0396b20a28944ea4ec4d2
dbb18d4238fa3a980e5c254ff25d3b39590b0159
2cc72ff87dcdabcb0a67d8dda7a7c440f8650ffe77f71602954a3076762be50a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CC72FF87DCDABCB0A67D8DDA7A7C440F8650FFE77F71602954A3076762BE50A"
Last-Modified: Tue, 01 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9278
Expires: Tue, 01 Nov 2022 15:21:28 GMT
Date: Tue, 01 Nov 2022 12:46:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 6a764d6e26d18cae36dc6fd7cb863aba
3519465b7928cd6b17896972fd5fd6ff0748d97d
754bc68a67a92ebbe2f55b3ff18f73c0a153cd874c43460b24b06546244ae21e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3556
Cache-Control: max-age=87233
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:50 GMT
Etag: "635fb917-1d7"
Expires: Wed, 02 Nov 2022 13:00:43 GMT
Last-Modified: Mon, 31 Oct 2022 12:01:27 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: D4EbLif1IMMZq3RNrKR/5zvlG4rLETYUGONRF6nm2E0TQi8qO4D7uuPulHDqvZs3HhfeVeZPiCc=
x-amz-request-id: 9HR1QPXFNB73014E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 01 Nov 2022 12:08:19 GMT
age: 2311
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 01 Nov 2022 12:46:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
200 OK 6.0 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (915), with CRLF, LF line terminators
Hash 1fac48f6b60a15a96e1cec36a8c054bc
b7de5f749f80006056b7b4fefb89f8f89ffb1dd8
187e8d8ba34ea8d2af0321ef61fd37f4e6f253a048a2c28c6a525e240ad02095
Analyzer Verdict Alert openphish AT&T Inc.
GET / HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 01 Nov 2022 12:46:50 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
language=en; expires=Tue, 15-Nov-2022 12:46:50 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"1e37578e8334757f57ec209ee31d9567-gzip"
Content-Encoding: gzip
X-Host: blu105.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 6042
Keep-Alive: timeout=10, max=62
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/css/social-icons.css?buildtime=1666997739
200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1666997739
IP
File type ASCII text, with very long lines (13080)
Hash ac8255fd3aff763f633de26aa635b291
9717c2a03ffe5a9662f8f4e834501160dea56f14
1450f9388d143d7f975c263e9c9728d99cdd07782439dffc564089ee02a74b31
GET /css/social-icons.css?buildtime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 28 Oct 2022 22:29:06 GMT
etag: W/"635c57b2-3319"
expires: Fri, 11 Nov 2022 23:09:18 GMT
cache-control: max-age=1209600
x-host: blu82.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 308253
x-served-by: cache-sjc10047-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 87, 260
x-timer: S1667306811.163580,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1640
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Droid_Sans/font.css?2
200 OK 133 B URL HTTP/2 cdn2.editmysite.com/fonts/Droid_Sans/font.css?2
IP
Hash 0e2cc4df8920265aad223affae9c59bd
d4015a3623afdc1dfa92e8dc4023542fc32045b7
83a222df8752b0bb3c59047080ee1b9f8b2ffc4c2cdbc153977ec3b4b7c95858
GET /fonts/Droid_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 28 Oct 2022 22:25:11 GMT
etag: "635c56c7-a7"
expires: Mon, 14 Nov 2022 12:24:38 GMT
cache-control: max-age=1209600
x-host: blu17.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 87733
x-served-by: cache-sjc10051-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 32, 17
x-timer: S1667306811.163799,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 133
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Droid_Serif/font.css?2
200 OK 134 B URL HTTP/2 cdn2.editmysite.com/fonts/Droid_Serif/font.css?2
IP
Hash 4eb8a70608c1ba71ed9d86b876185375
7b2988a6eecdc4036f2c44763294ed79d65efa72
40afb1b926aaef165b6dc45c86363ae160e50e8b6706b54690bf906f35796ee7
GET /fonts/Droid_Serif/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 28 Oct 2022 22:25:11 GMT
etag: "635c56c7-a8"
expires: Tue, 15 Nov 2022 07:43:11 GMT
cache-control: max-age=1209600
x-host: blu129.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 18220
x-served-by: cache-sjc10083-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 3
x-timer: S1667306811.163984,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 134
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Open_Sans/font.css?2
200 OK 367 B URL HTTP/2 cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP
Hash 52e94ffb1c814650bab35433c3034ac7
b42d636ac9b71805f751612208ddb34e93a6538d
fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 21 Oct 2022 14:10:44 GMT
etag: "6352a864-a2a"
expires: Mon, 07 Nov 2022 12:08:38 GMT
cache-control: max-age=1209600
x-host: grn24.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 693493
x-served-by: cache-sjc10081-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 2147
x-timer: S1667306811.164552,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 367
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Coustard/font.css?2
200 OK 242 B URL HTTP/2 cdn2.editmysite.com/fonts/Coustard/font.css?2
IP
Hash 92b56533ab6e0bb12cae923576d39725
cea2df9262f5d5c0bbb1b70db5bc7b64f62e7388
6a99bf8c4589a35d8b087dcc65cd808470a9f4ae5e78ca5eef87396180afbf74
GET /fonts/Coustard/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 17 Oct 2022 18:37:23 GMT
etag: "634da0e3-1af"
expires: Tue, 01 Nov 2022 13:03:13 GMT
cache-control: max-age=1209600
x-host: blu114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 1208617
x-served-by: cache-sjc10055-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 4448, 1
x-timer: S1667306811.164139,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 242
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f9303161ce04577a7bcd56ce42831a56
690bf1468d25898db3ab46e03639946854ab25f0
40c380dba92d637574e7699ae184a089c090bab6f7215dc0178dadd8b23da43c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2684
Cache-Control: max-age=158679
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:51 GMT
Etag: "6360d396-1d7"
Expires: Thu, 03 Nov 2022 08:51:30 GMT
Last-Modified: Tue, 01 Nov 2022 08:06:46 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
cdn2.editmysite.com/js/jquery-1.8.3.min.js
200 OK 34 kB URL HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP
File type ASCII text, with very long lines (65483)
Hash 67a5a77f65f13559b3d723829f2e0108
5e861ec7c2993abffc3591d6132c47bc7cdc3e98
ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 17 Oct 2022 18:41:15 GMT
etag: "634da1cb-16dc4"
expires: Tue, 01 Nov 2022 23:08:14 GMT
cache-control: max-age=1209600
x-host: grn111.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 1172317
x-served-by: cache-sjc10038-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 3644
x-timer: S1667306811.164534,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1666997739&
200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1666997739&
IP
File type ASCII text, with very long lines (65024)
Hash 47ecd46fdd9dc84622ce1294541d92ef
7aeda09a697e41f88f4cbad0843d94bb3fdb7a50
ec251328b1cb905ffb368b273ab84ca8cf4f451218ed3412024ab56b48d0fbd0
GET /js/lang/en/stl.js?buildTime=1666997739& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 22:27:53 GMT
etag: "635c5769-2c1b7"
expires: Fri, 11 Nov 2022 22:56:12 GMT
cache-control: max-age=1209600
x-host: grn110.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 309039
x-served-by: cache-sjc10058-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 87, 236
x-timer: S1667306811.164748,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32708
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1666997739
200 OK 1.4 kB URL HTTP/2 cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1666997739
IP
File type ASCII text, with very long lines (3600), with no line terminators
Hash 121a5b9688d8e70ee7bb06cc79491f76
3a28220baa7d8879270c8311bed7dddefa7e43e9
181716c84474c9eb6685a809d69dda5d49ce44dfbf64c5dee89a3091e23def40
GET /js/site/footerSignup.js?buildTime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 22:29:29 GMT
etag: "635c57c9-e10"
expires: Fri, 11 Nov 2022 22:56:18 GMT
cache-control: max-age=1209600
x-host: grn92.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 309033
x-served-by: cache-sjc10023-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 40, 936
x-timer: S1667306811.173346,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1372
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1666997739
200 OK 3.7 kB URL HTTP/2 cdn2.editmysite.com/js/site/theme-plugins.js?buildTime=1666997739
IP
File type ASCII text, with very long lines (12622), with no line terminators
Hash 326fac3bf2f5a48ddb695ce00260efd8
824134c8f3cbfc5b0ce818dcb0befc99842e4fa6
8fa81dbf4afb7142ee09f89d14e23fd44928c782bced6ef6c44fe9515429af50
GET /js/site/theme-plugins.js?buildTime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 22:29:29 GMT
etag: "635c57c9-314e"
expires: Fri, 11 Nov 2022 23:02:36 GMT
cache-control: max-age=1209600
x-host: grn77.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 308654
x-served-by: cache-sjc10025-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 149, 1
x-timer: S1667306811.166293,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3747
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Montserrat/font.css?2
200 OK 276 B URL HTTP/2 cdn2.editmysite.com/fonts/Montserrat/font.css?2
IP
Hash 559eefb63fcae2a3f85471dd3903016a
5e4a9f5b529f2f6d2ee1de511231f856e673066c
09110f0d179c52677e2caf24d4bad70e5d717acb2eff2887ac36dbc1d9583fae
GET /fonts/Montserrat/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 20 Oct 2022 15:05:42 GMT
etag: "635163c6-354"
expires: Thu, 03 Nov 2022 18:07:57 GMT
cache-control: max-age=1209600
x-host: grn86.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 1017533
x-served-by: cache-sjc10070-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 8, 819
x-timer: S1667306811.173179,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 276
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Lora/font.css?2
200 OK 321 B URL HTTP/2 cdn2.editmysite.com/fonts/Lora/font.css?2
IP
Hash 73bc8f5c36181a89bab4c7388c6e964b
a1489dba52342bcb09ae18bb2c71805489ac2c6a
ffe360dfb861aaf517a2bea4dd5dcb9615073984186f2e3bd4a49b00871b776d
GET /fonts/Lora/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 24 Oct 2022 20:02:15 GMT
etag: "6356ef47-6aa"
expires: Tue, 08 Nov 2022 11:35:58 GMT
cache-control: max-age=1209600
x-host: grn98.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 609053
x-served-by: cache-sjc10021-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 44, 179
x-timer: S1667306811.173129,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 321
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/old/fancybox.css?1666997739
200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1666997739
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 28 Oct 2022 22:29:11 GMT
etag: "635c57b7-f47"
expires: Fri, 11 Nov 2022 23:09:18 GMT
cache-control: max-age=1209600
x-host: blu14.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 308253
x-served-by: cache-sjc10078-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 86, 287
x-timer: S1667306811.173242,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Lato/font.css?2
200 OK 365 B URL HTTP/2 cdn2.editmysite.com/fonts/Lato/font.css?2
IP
Hash f6aec8855300407d88c732db5b97c3cf
a6a4c862f86744cbf3f5477e830c9f80ab986eaf
6f00c364d20ef3193c0b008183501117dec28fe7a538ccebdc4492f5c9b281d3
GET /fonts/Lato/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 20 Oct 2022 15:05:42 GMT
etag: "635163c6-a0c"
expires: Thu, 03 Nov 2022 18:06:26 GMT
cache-control: max-age=1209600
x-host: grn101.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 1017625
x-served-by: cache-sjc10040-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 2040, 75
x-timer: S1667306811.173194,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 365
X-Firefox-Spdy: h2
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/main_style.css?1667219266
200 OK 8.1 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/main_style.css?1667219266
IP
File type ASCII text, with very long lines (936)
Hash 6b002bb91daa3488b739b5550e96ffb0
33a75617a7a20263ae28a517a2f4cbc8f4131cdd
c84763497b3ee3d50831863a2b466686bee9cd048cb91c6659f7256703b2643c
Analyzer Verdict Alert openphish AT&T Inc.
GET /files/main_style.css?1667219266 HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu147.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/css/sites.css?buildTime=1666997739
200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1666997739
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 28 Oct 2022 22:29:06 GMT
etag: W/"635c57b2-347ac"
expires: Fri, 11 Nov 2022 22:56:23 GMT
cache-control: max-age=1209600
x-host: grn54.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 309028
x-served-by: cache-sjc10044-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 81, 382
x-timer: S1667306811.173208,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1666997739
200 OK 159 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1666997739
IP
File type ASCII text, with very long lines (32007)
Size 159 kB (158930 bytes)
Hash f740fdfbcf394f270a9b176029fa6f37
5f20c49627104282744508eb0278d7185128532e
3021f0f944c9bd7c6e995601f25b3d970e0bd41f9a411f08b2871bb5415a8707
GET /js/site/main-customer-accounts-site.js?buildTime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 22:29:29 GMT
etag: "635c57c9-8250f"
expires: Fri, 11 Nov 2022 22:56:23 GMT
cache-control: max-age=1209600
x-host: blu28.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 309028
x-served-by: cache-sjc10082-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 41522, 2
x-timer: S1667306811.173293,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 158930
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash cab96cdb0e923347cc54b961a976154a
c89e40d8dfab3a5350746efbf847aa5ac6f27e06
ffb0ce1278b4bf0c0c67bbfd6ad053b1e5f00409b4c879e073e5a3fc0607f6be
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "C437508DF448C63E9D8C7BC1F80C6205D538E87A"
Expires: Wed, 02 Nov 2022 00:00:00 GMT
Last-Modified: Tue, 01 Nov 2022 12:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2323
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7634bc52aeb7fab8-OSL
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/theme/custom.js?1667219103
200 OK 2.6 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/theme/custom.js?1667219103
IP
Hash 0ebe47e011abac0beb0353c38e6fe5f6
c234e549ad5d546b3901f209a50639352dfd23db
8f6c0204657565452ae33714fa329826c79cbea1af9ab891e70abfc9cd66e5fa
Analyzer Verdict Alert openphish AT&T Inc.
GET /files/theme/custom.js?1667219103 HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 10 May 2022 00:14:12 GMT
x-rgw-object-type: Normal
ETag: W/"167b5f2a55a6ac2775d799bf9a87343d"
x-amz-request-id: tx000000000000001da853b-006284a8cb-b9fbc77-sfo1
X-Storage-Bucket: za16d
X-Storage-Object: a16df105a4c2f66f83e36051a5d4b3e7399fadc9046f779b7f373a5dc46b2361
X-Host: blu141.sf2p.intern.weebly.net
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ww+6RqanGlJjr1ykMYnldA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WomQlPYkM03bEcAlBqxE01DGWBw=
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/att-top-2_orig.png
200 OK 5.4 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/att-top-2_orig.png
IP
File type PNG image data, 340 x 172, 8-bit/color RGBA, non-interlaced\012- data
Hash 1a5270650c52e9aad2ab35a694a1188b
9613ea6affd34051e1febae7cfddbc49c28fc3cb
ed12495f0ebeaeff51a14ecbca33063c4023bfab3a900f5d06c0b1a6ba4e8891
Analyzer Verdict Alert openphish AT&T Inc.
GET /uploads/1/4/3/6/143693680/att-top-2_orig.png HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: image/png
Content-Length: 5382
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2022 12:46:09 GMT
x-rgw-object-type: Normal
ETag: "1a5270650c52e9aad2ab35a694a1188b"
x-amz-request-id: tx00000000000002523cbf5-00635e83b5-c669cc6-sfo1
X-Storage-Bucket: zed12
X-Storage-Object: ed12495f0ebeaeff51a14ecbca33063c4023bfab3a900f5d06c0b1a6ba4e8891
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/last-donw_orig.png
200 OK 6.8 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/last-donw_orig.png
IP
File type PNG image data, 656 x 55, 8-bit/color RGBA, non-interlaced\012- data
Hash 7740d007bd473d7128c7d14b4545aeb5
a81316535fa47ebc24028ad63717292b8b480334
905e4f21841742edff138991a00369f92fc340e5f17d3428520bf8d25e229df7
Analyzer Verdict Alert openphish AT&T Inc.
GET /uploads/1/4/3/6/143693680/last-donw_orig.png HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: image/png
Content-Length: 6780
Connection: keep-alive
Last-Modified: Mon, 31 Oct 2022 10:17:30 GMT
x-rgw-object-type: Normal
ETag: "7740d007bd473d7128c7d14b4545aeb5"
x-amz-request-id: tx000000000000026131d0f-00635fea85-c695612-sfo1
X-Storage-Bucket: z905e
X-Storage-Object: 905e4f21841742edff138991a00369f92fc340e5f17d3428520bf8d25e229df7
X-Host: blu56.sf2p.intern.weebly.net
Accept-Ranges: bytes
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/donw-att_orig.png
200 OK 2.9 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/uploads/1/4/3/6/143693680/donw-att_orig.png
IP
File type PNG image data, 308 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash a9e8e04d4bc1567a9dedbba2d798ae2d
ddf156289470721d0d6f9e7e5f27e2a3fe42e87a
02a72e528ba79adf2442b5129e6c94aea6e058c331c5d6cdd75ce30745ee5256
Analyzer Verdict Alert openphish AT&T Inc.
GET /uploads/1/4/3/6/143693680/donw-att_orig.png HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: image/png
Content-Length: 2917
Connection: keep-alive
Last-Modified: Mon, 31 Oct 2022 10:12:14 GMT
x-rgw-object-type: Normal
ETag: "a9e8e04d4bc1567a9dedbba2d798ae2d"
x-amz-request-id: tx000000000000025e172f7-00635ff875-c696eea-sfo1
X-Storage-Bucket: z02a7
X-Storage-Object: 02a72e528ba79adf2442b5129e6c94aea6e058c331c5d6cdd75ce30745ee5256
X-Host: grn47.sf2p.intern.weebly.net
Accept-Ranges: bytes
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/theme/plugins.js?1667219103
200 OK 18 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/files/theme/plugins.js?1667219103
IP
Hash 35f647b2742c690703076a35ee299d33
d8f040a94a3db61a2eb9c4d22906dd515b85fa75
89b301a048d2d58d670d3f1767422cc357dd9e66a0b0a1fd047b5165c30c87c2
GET /files/theme/plugins.js?1667219103 HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 28 Jan 2022 02:17:25 GMT
x-rgw-object-type: Normal
ETag: W/"86db86f3ec46612c95a552a133cf2501"
x-amz-request-id: tx000000000000001ad1151-0062847a5a-b9fbc77-sfo1
X-Storage-Bucket: z8a29
X-Storage-Object: 8a295e631b0d74ebc6b734fdd9a2d5b29653da10a362599b0004ee135c115ce9
X-Host: grn73.sf2p.intern.weebly.net
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ff8f7daa3e3cf5fd5bd540f75584790
a751a98efc3dc413002861eaa50f4bee27f67546
404550d1969f2e833e4e907df558c9980e77f7c77f2b0bce81c0b5dd0a69a1e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6cc30cb3f907c9b1f0429e20a0ede92
eebc4a1a34d5cc3feb9b0ac8947515f871e83487
8b7ac6d0184c60d07b4d2d47617b8620657d327cfeeac6877ea5338cddd9e237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Tue, 01 Nov 2022 12:32:37 GMT
expires: Tue, 01 Nov 2022 14:32:37 GMT
cache-control: public, max-age=7200
age: 855
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?_=1667306806652
200 OK 554 B URL HTTP/2 www.google.com/recaptcha/api.js?_=1667306806652
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 0f4f6d55fc7aaaaf0826a9991ba4b7eb
b66bb6776fcacd2e4508ee7bc25fc73100143f67
4bb19945506416b1845c56e3c1721a3b863908cc26dc92a9677fb1f5efa6cce5
GET /recaptcha/api.js?_=1667306806652 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 01 Nov 2022 12:46:52 GMT
date: Tue, 01 Nov 2022 12:46:52 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2ff8f7daa3e3cf5fd5bd540f75584790
a751a98efc3dc413002861eaa50f4bee27f67546
404550d1969f2e833e4e907df558c9980e77f7c77f2b0bce81c0b5dd0a69a1e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 746114ba44554e7476c30a3f65bce9db
69b0d4e489b3b3fa8a42a4706e9071e08b579562
0c452d95f6325b5647f5fae735405de22fa28fa6e912577deaa5cea299541388
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
Analyzer Verdict Alert openphish AT&T Inc.
GET /favicon.ico HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 12:46:52 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000000c68792-0061a70442-a9f41e7-sfo1
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: blu62.sf2p.intern.weebly.net
Accept-Ranges: bytes
gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 01 Nov 2022 12:46:52 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn45.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=51
Connection: Keep-Alive
Content-Type: application/json
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a83e1b471c9170b115bb17be15dec6e0
4ecf78fbf48c50a11aaf863e19d885e838942cd4
efcb6f590daaf9a6974426ab1b2fe7a68b43fe4eb1b28eeaeac17f45935e5a49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js
200 OK 161 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js
IP
File type ASCII text, with very long lines (692)
Size 161 kB (161443 bytes)
Hash f08dc1af68358a3cfc29cc0f7ed68597
bcc7efc80663dd060d7e9e7513994439c0e59a68
01ceb7d3a7706a69ecefbc7863914626ccde29859326c51f98e236bea8242767
GET /recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 161443
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Oct 2022 06:36:17 GMT
expires: Tue, 31 Oct 2023 06:36:17 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Oct 2022 04:01:21 GMT
content-type: text/javascript
age: 108635
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a83e1b471c9170b115bb17be15dec6e0
4ecf78fbf48c50a11aaf863e19d885e838942cd4
efcb6f590daaf9a6974426ab1b2fe7a68b43fe4eb1b28eeaeac17f45935e5a49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 12:46:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e690a228f5929c894260c90ded62dd98
0128873b35208598c2003179d9a11651a7dbc9a4
ee6e6fba90a22cc92786a403f5a80fd09cbc7d2c70b54db9e732959ec2d1dc77
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104028
Date: Tue, 01 Nov 2022 12:46:52 GMT
Etag: "635ffb0f-1d7"
Expires: Wed, 02 Nov 2022 17:40:40 GMT
Last-Modified: Mon, 31 Oct 2022 16:42:55 GMT
Server: ECS (dcb/7FA8)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pfJV1ah0qnsh0xWTuc7dFd38REkmaY-vPqnVSbINmOyK6slxXwpEfw==
Age: 3465
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e690a228f5929c894260c90ded62dd98
0128873b35208598c2003179d9a11651a7dbc9a4
ee6e6fba90a22cc92786a403f5a80fd09cbc7d2c70b54db9e732959ec2d1dc77
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105356
Date: Tue, 01 Nov 2022 12:46:52 GMT
Etag: "635ffb0f-1d7"
Expires: Wed, 02 Nov 2022 18:02:48 GMT
Last-Modified: Mon, 31 Oct 2022 16:42:55 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DGEFslb-scz7i23esh590Y4dMQgPjyL6IGlZoCfDKmS2ZVPfRxh4HA==
Age: 4793
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3240
Expires: Tue, 01 Nov 2022 13:40:52 GMT
Date: Tue, 01 Nov 2022 12:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3240
Expires: Tue, 01 Nov 2022 13:40:52 GMT
Date: Tue, 01 Nov 2022 12:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3240
Expires: Tue, 01 Nov 2022 13:40:52 GMT
Date: Tue, 01 Nov 2022 12:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3240
Expires: Tue, 01 Nov 2022 13:40:52 GMT
Date: Tue, 01 Nov 2022 12:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3240
Expires: Tue, 01 Nov 2022 13:40:52 GMT
Date: Tue, 01 Nov 2022 12:46:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4402157-b00a-4732-b2df-0f3e2b655219.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4402157-b00a-4732-b2df-0f3e2b655219.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f09a2a14bf888ca33df5b059c73f89f8
289a0c698c3a826f0614f6dec56d15c2c3320519
946007230f6cdd732a1c6bf3aa4073738ac426cdfda843cd9a9981f122fb8608
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4402157-b00a-4732-b2df-0f3e2b655219.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4456
x-amzn-requestid: 58bbf579-518e-4db6-b5a7-729aa207437e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47JZH56oAMFraw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f08-6c2770552a9f25b14ac3e32a;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CXGpDRQzYxI-0aHpKiU-GhPoEJaKEdn9k5AYJqlx3rUvpMG2IVp-Ew==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:50:40 GMT
age: 53772
etag: "289a0c698c3a826f0614f6dec56d15c2c3320519"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac784420-6bab-4f05-bd56-3132d4132188.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac784420-6bab-4f05-bd56-3132d4132188.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5be7f38571f5a343ef14f05b10b6f1e
dd9915817bb5241ef5ecd488f168c5ffb088b694
fb40fe8abf447dc4b72c993834a64b2393b7ab780c472b777c465b78bbe9d83a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac784420-6bab-4f05-bd56-3132d4132188.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9484
x-amzn-requestid: 82f4cd3d-00c6-4be8-b93d-086d833fd54c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47IuEkkIAMFnJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f04-5e617c1263732643101a24d0;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Zx9ZiOOOoSJAf-MyNJJvnp_0ziW2Nla91O4baFtHsbgh4yJmJCqjxA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:51:16 GMT
etag: "dd9915817bb5241ef5ecd488f168c5ffb088b694"
content-type: image/jpeg
age: 53736
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85c6304-6f72-4904-bb25-968b35616ef5.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85c6304-6f72-4904-bb25-968b35616ef5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f9f8683351154be3300311e3a7e29e3
4fc868d652910c7dcf4ef0e87531de4ee6007c45
d4f012729e0eddc20948ad98d653794204f80344a5840142877dcaa8d2520a71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85c6304-6f72-4904-bb25-968b35616ef5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7428
x-amzn-requestid: 0eabcd9d-372d-4be6-aa58-26f3ce15d7bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aioHzF3dIAMFQ4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635753cb-7332e0ae76cbda142a20fe13;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 03:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RRcTk-QZvoKyAWq4oyBt49pSugGTxwQyT0CK9Y3zrzZgUB2hWXEMbQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 22:22:56 GMT
age: 51836
etag: "4fc868d652910c7dcf4ef0e87531de4ee6007c45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F870b6a56-8e8b-4d96-b7fc-d01d12918f34.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F870b6a56-8e8b-4d96-b7fc-d01d12918f34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1447ed9251d68d1247d794e599940ba
e665dbd5ff52eb3821ef8f20bf68e062735e8cc1
e9c285b9251938b3be1f78de42673102566732dc3ebdc216ad78d27bea775a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F870b6a56-8e8b-4d96-b7fc-d01d12918f34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4592
x-amzn-requestid: a24e40d7-41fd-40b4-84fb-aa8893dddebb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a49JIHfOoAMFuyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6360423a-217c4b2b3fa121d6684fe27b;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:46:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CbuPFEIK6BDO4N7hZv3NaNKrOhdpNZxqtAcm5Zq1ogZElF7_1WgK3w==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:49:17 GMT
age: 53855
etag: "e665dbd5ff52eb3821ef8f20bf68e062735e8cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbc7baad-e067-4cde-8525-ef8356465601.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbc7baad-e067-4cde-8525-ef8356465601.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 44a43638c497d10c7fa7dadd6a6afeb9
893fb3f21b144d0e3a810a2314ffaa7e8e40818c
605355c2b14d335aabfd83a6fa49d61fb804388d6a156c8d47fbbb127f932ca6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbc7baad-e067-4cde-8525-ef8356465601.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7531
x-amzn-requestid: 36cd2bee-2c06-4195-9b27-8a6e218694da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47IuF1nIAMFrBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f04-04202d745190ba251e14785c;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VqMJ5xa4fKEFjM8ioRilgqN0DMxQjXOAYCPFq30hEcIVlI8AqNZulA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:50:40 GMT
age: 53772
etag: "893fb3f21b144d0e3a810a2314ffaa7e8e40818c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f483454-b074-4576-b487-76a14ccb2059.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f483454-b074-4576-b487-76a14ccb2059.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bd006407a4ea0fbeec2f1351a71f30bc
d1625420cdc79643e759247b0e9ac89dadfbe956
fd461665ee463fad26300630684a11e3c520485e3b001c2f08439d50589ddbb7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f483454-b074-4576-b487-76a14ccb2059.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10527
x-amzn-requestid: 1b709c25-8424-49d8-bc0e-dac3fbc154ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apNEzH5ZoAMFWdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359f551-3fb0703f27b571cf7f85e59e;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:04:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NPeo4wQ7C9AYBQt5M2TkQv5bv3E8wUR7EST2xOLBla7rA56j2VkTiw==
via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 23:26:02 GMT
age: 48050
etag: "d1625420cdc79643e759247b0e9ac89dadfbe956"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 01 Nov 2022 12:46:52 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1837
Origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 01 Nov 2022 12:46:52 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=580b60ea-47aa-4791-9097-5abff6e96dd7; Expires=Wed, 01 Nov 2023 12:46:52 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
200 OK 0 B URL HTTP/2 cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
IP
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdujQNpHaXULXK5hWOudOsrFbrCOJBmkXkf6lNHnzHxB1q3PphW4yFVZQbxms7rfGEwEu0IdDaAyLbpAPqDN6NvCrqCgiKDD
cache-control: public, max-age=86400, s-maxage=259200
expires: Thu, 06 Oct 2022 22:59:09 GMT
last-modified: Tue, 12 Feb 2019 18:19:08 GMT
etag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
content-type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
via: 1.1 varnish
age: 135992
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 587
x-timer: S1667306811.173257,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9677
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1666997739
200 OK 0 B URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1666997739
IP
GET /js/site/main.js?buildTime=1666997739 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdghhdhdhdjdkdujdjhdgdggdfdgdfddffdfdgcgdggdgdgdgggdggf.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 22:29:29 GMT
etag: "635c57c9-74804"
expires: Fri, 11 Nov 2022 22:56:12 GMT
cache-control: max-age=1209600
x-host: grn149.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 01 Nov 2022 12:46:51 GMT
age: 309039
x-served-by: cache-sjc10042-SJC, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 84, 2
x-timer: S1667306811.164981,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2
199.34.228.54
93.184.220.29
151.101.85.46
23.36.77.32
104.18.20.226