| cdn2.editmysite.com/css/sites.css?buildTime=1646063574 |  151.101.129.46 | 200 OK | 30 kB |
URL GET HTTP/2cdn2.editmysite.com/css/sites.css?buildTime=1646063574 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash025f5bacd3035e5cf943bd87a2fcf845 bc2526c2f2263ce2c3672d99c63e901c0abf7445 5ecab7ce27f2bc2fcdd78cb016d7e8908af282b3914a1993b26cb7cbc84039b3
GET /css/sites.css?buildTime=1646063574 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 08 Apr 2024 21:27:48 GMT
etag: W/"66146154-337cc"
expires: Tue, 23 Apr 2024 08:46:49 GMT
cache-control: max-age=1209600
x-host: blu52.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 849192
date: Fri, 19 Apr 2024 04:40:01 GMT
x-served-by: cache-sjc1000097-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 513, 0
x-timer: S1713501602.688643,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29654
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png | 151.101.129.46 | 200 OK | 9.7 kB |
URL GET HTTP/2cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typePNG image data, 199 x 97, 8-bit colormap, non-interlaced Hash6e0f7ad31bf187e0d88fc5787573ba71 14e8b85cc32a01c8901e4ac0160582d29a45e9e6 580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv_3Ml7nXef57XrsvYd6lB_ZtG8vsaIqQwos-v5hf3ul8_PkDxq_UevwRZMQPW5FlbqgzJBTWctBJlgNqBBI8Q
cache-control: public, max-age=86400, s-maxage=259200
expires: Sun, 24 Oct 2021 00:13:23 GMT
last-modified: Tue, 12 Feb 2019 18:19:08 GMT
etag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
content-type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
server: UploadServer
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:01 GMT
via: 1.1 varnish
age: 179327
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 2735
x-timer: S1713501602.690719,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9677
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/css/old/fancybox.css?1646063574 | 151.101.129.46 | 200 OK | 1.2 kB |
URL GET HTTP/2cdn2.editmysite.com/css/old/fancybox.css?1646063574 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeASCII text, with very long lines (3910) Hash1dcebbb5a1eb8b028310ceeb72a339b3 e254b7a35ac189fd1ce9cf8bd78593bebfe27d7d 865cb87de9fc4d6530edce21f0103107abae6abe45cabdff2ad9af067b3d8e0a
GET /css/old/fancybox.css?1646063574 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 05 Apr 2024 19:42:47 GMT
etag: "66105437-f47"
expires: Sat, 20 Apr 2024 00:04:29 GMT
cache-control: max-age=1209600
x-host: blu49.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:01 GMT
age: 1139733
x-served-by: cache-sjc10044-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 113, 2
x-timer: S1713501602.699173,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/css/social-icons.css?buildtime=1646063574 | 151.101.129.46 | 200 OK | 1.6 kB |
URL GET HTTP/2cdn2.editmysite.com/css/social-icons.css?buildtime=1646063574 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeASCII text, with very long lines (13080) Hashf73aee630766df0671f49a17bccd680b 7461d74cb1793f10ae613c8d607789a937fca9cf 165bcc2f62dd0ed629f9f3c58c69d47c5c21c1abe89b5463148ced6ef1783da0
GET /css/social-icons.css?buildtime=1646063574 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 12 Apr 2024 19:50:31 GMT
etag: W/"66199087-3319"
expires: Sun, 28 Apr 2024 03:09:31 GMT
cache-control: max-age=1209600
x-host: blu134.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 437431
date: Fri, 19 Apr 2024 04:40:01 GMT
x-served-by: cache-sjc10029-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 97, 0
x-timer: S1713501602.696618,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1639
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1646063574& | 151.101.129.46 | 200 OK | 34 kB |
URL GET HTTP/3cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1646063574& IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65024) Hash6029ea0d7e342d1f8ac4b3d21af18238 fdfa3448753dd83aeef9bfe49a6b0d7b776ad68c 2fa7eecab5db277fa2aaf6707b99648a42c60a323c2af6b7e0c2936fdc31eaa7
GET /js/lang/en/stl.js?buildTime=1646063574& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 20:58:18 GMT
etag: "661d94ea-2d861"
expires: Tue, 30 Apr 2024 11:57:24 GMT
cache-control: max-age=1209600
x-host: grn40.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 232957
date: Fri, 19 Apr 2024 04:40:01 GMT
x-served-by: cache-sjc10056-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 84, 0
x-timer: S1713501602.692967,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33650
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1646063574 | 151.101.129.46 | 200 OK | 159 kB |
URL GET HTTP/2cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1646063574 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (32029) Size159 kB (159104 bytes) Hash477945f3201c7b0c701a23b373cadb2a ac7582e7ab946ce51cb94431cb026ebe6dbce9c2 207ec261a8530654204ada78a03b0cc6c129c09bac87013c3a8bb3bedfe84be6
GET /js/site/main-customer-accounts-site.js?buildTime=1646063574 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 05 Apr 2024 19:43:04 GMT
etag: "66105448-826d7"
expires: Sun, 21 Apr 2024 07:27:49 GMT
cache-control: max-age=1209600
x-host: grn85.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 1026733
date: Fri, 19 Apr 2024 04:40:01 GMT
x-served-by: cache-sjc10081-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 685, 0
x-timer: S1713501602.689792,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 159104
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1713475202 | 151.101.129.46 | 200 OK | 1.4 kB |
URL GET HTTP/2cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1713475202 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (3600), with no line terminators Hash40b81b2d52ba9d2e2c64c31ff6a24cd7 6b5689250661646ecbb841f2475f1556a113373c e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96
GET /js/site/footerSignup.js?buildTime=1713475202 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 21:03:47 GMT
etag: "66218ab3-e10"
expires: Thu, 02 May 2024 21:21:40 GMT
cache-control: max-age=1209600
x-host: grn154.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:01 GMT
age: 26302
x-served-by: cache-sjc1000088-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 52, 125
x-timer: S1713501602.723342,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1372
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/site/main.js?buildTime=1646063574 | 151.101.129.46 | 200 OK | 146 kB |
URL GET HTTP/2cdn2.editmysite.com/js/site/main.js?buildTime=1646063574 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (32147) Size146 kB (146401 bytes) Hash0de029f7ed3fd4cbfdcef31b834138e3 224512b5c840e885cd0732822af53301681ec799 593fec175b00a1f118f77bb8ed378e857e9f1225f0fc019fcea508b27da53cf0
GET /js/site/main.js?buildTime=1646063574 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 22:22:40 GMT
etag: "661efa30-74804"
expires: Wed, 01 May 2024 15:07:54 GMT
cache-control: max-age=1209600
x-host: blu38.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 135128
date: Fri, 19 Apr 2024 04:40:01 GMT
x-served-by: cache-sjc1000122-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 137, 0
x-timer: S1713501602.716947,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146401
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt6_orig.png | 74.115.51.8 | 200 OK | 1.3 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt6_orig.png IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typePNG image data, 370 x 64, 8-bit colormap, non-interlaced Hasha41efd3fc30b25d9715bf5ae8f37ce1a e75280de4164949686b2ae6fbe0fe54f4bd70a28 53efea3a2ff037a7274ea5b0fd13a02293321c212835314c7344b6c0f9125bf9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/bt6_orig.png HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:01 GMT
content-type: image/png
content-length: 1289
cf-ray: 876a36d23a6db515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "a41efd3fc30b25d9715bf5ae8f37ce1a"
last-modified: Mon, 11 Oct 2021 13:06:28 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx00000a1126321780d3cf1-0065e18413-e95274c-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z53ef
x-storage-object: 53efea3a2ff037a7274ea5b0fd13a02293321c212835314c7344b6c0f9125bf9
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt22_orig.png | 74.115.51.8 | 200 OK | 15 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt22_orig.png IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typePNG image data, 1327 x 172, 8-bit/color RGBA, non-interlaced Hashffff9665ca3b88af0762caffe3661a1c 10af581b74c40f27bae8e9a9fa067f81450ad690 89a32f981ca98fe9477658a9205996354af9e3505e2193ed85252c02e7bd4138
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/bt22_orig.png HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:01 GMT
content-type: image/png
content-length: 14983
cf-ray: 876a36d23a75b515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "ffff9665ca3b88af0762caffe3661a1c"
last-modified: Thu, 17 Feb 2022 13:30:43 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx0000099448268dc8bd61b-0065ef21b5-e95274c-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z89a3
x-storage-object: 89a32f981ca98fe9477658a9205996354af9e3505e2193ed85252c02e7bd4138
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js | 142.250.74.74 | 200 OK | 34 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js IP142.250.74.74:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (65483) Hash3576a6e73c9dccdbbc4a2cf8ff544ad7 06e872300088b9ba8a08427d28ed0efcdf9c6ff5 61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:52:47 GMT
expires: Wed, 16 Apr 2025 09:52:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 240435
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1646063574& | 151.101.129.46 | 200 OK | 34 kB |
URL GET HTTP/3cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1646063574& IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65024) Hash6029ea0d7e342d1f8ac4b3d21af18238 fdfa3448753dd83aeef9bfe49a6b0d7b776ad68c 2fa7eecab5db277fa2aaf6707b99648a42c60a323c2af6b7e0c2936fdc31eaa7
GET /js/lang/en/stl.js?buildTime=1646063574& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33650
server: nginx
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 20:58:18 GMT
etag: "661d94ea-2d861"
expires: Tue, 30 Apr 2024 11:57:24 GMT
cache-control: max-age=1209600
x-host: grn40.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:02 GMT
age: 232957
x-served-by: cache-sjc10056-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 84, 1
x-timer: S1713501602.262901,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt3_orig.png | 74.115.51.8 | 200 OK | 9.1 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt3_orig.png IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typePNG image data, 1337 x 113, 8-bit/color RGBA, non-interlaced Hash8c771fb1059afc4e41cc43e6d2ae3bcd 9c347e4b396b5054511670f9810df6cd57a51dee a63aafd64fbf70cf594dac48cc6efab020c7de1caaa8ed1b291457a51b2ca90c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/bt3_orig.png HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:02 GMT
content-type: image/png
content-length: 9076
cf-ray: 876a36d23a6ab515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "8c771fb1059afc4e41cc43e6d2ae3bcd"
last-modified: Mon, 11 Oct 2021 13:09:04 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx00000b2ef54f1b1a8e709-00661dcea1-e8f44ee-sfo1
x-rgw-object-type: Normal
x-storage-bucket: za63a
x-storage-object: a63aafd64fbf70cf594dac48cc6efab020c7de1caaa8ed1b291457a51b2ca90c
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.67 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.67:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0 Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://btinternet2022upgrade.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:21:46 GMT
expires: Fri, 18 Apr 2025 17:21:46 GMT
cache-control: public, max-age=31536000
age: 40696
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.67:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://btinternet2022upgrade.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 269131
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt2_orig.png | 74.115.51.8 | 200 OK | 2.0 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt2_orig.png IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typePNG image data, 307 x 71, 8-bit/color RGBA, non-interlaced Hash319d7e6da54ac4a7cace7f8c3994f2d1 8246a2bc731ffb9fa4c8ffa453b02faaac2343c7 2617007b5d746fb5b11c828a377d79a5be94b3385461b01ad322a7dae926bc82
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/bt2_orig.png HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:02 GMT
content-type: image/png
content-length: 1993
cf-ray: 876a36d23a74b515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "319d7e6da54ac4a7cace7f8c3994f2d1"
last-modified: Mon, 11 Oct 2021 13:09:35 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx000009c8a7a081c7c0c12-00660d4b68-e8f44ee-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z2617
x-storage-object: 2617007b5d746fb5b11c828a377d79a5be94b3385461b01ad322a7dae926bc82
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 | 142.250.74.67 | 200 OK | 28 kB |
URL GET HTTP/2fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 IP142.250.74.67:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28076, version 1.0 Hash876d74bcd0a927aba5be92bf7993f1aa 1ffc2b292eb17625a33feaf5460e84d137846811 dcb085ad0fca889c4a1b898ccc7458c5d586e5740e7b7bffe065ac6a5e247ada
GET /s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://btinternet2022upgrade.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 12 Apr 2024 17:04:31 GMT
expires: Sat, 12 Apr 2025 17:04:31 GMT
cache-control: public, max-age=31536000
age: 560131
last-modified: Wed, 13 Sep 2023 22:14:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/js/wsnbn/snowday262.js | 151.101.129.46 | 200 OK | 26 kB |
URL GET HTTP/3cdn2.editmysite.com/js/wsnbn/snowday262.js IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2512) Hash99bbe560926e583b8e99036251deb783 8d81b73ae06f664f9d9e53dd5829a799bf434491 648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 25752
server: nginx
content-type: application/javascript
last-modified: Fri, 05 Apr 2024 19:42:32 GMT
etag: "66105428-124fe"
expires: Sun, 21 Apr 2024 10:09:56 GMT
cache-control: max-age=1209600
x-host: grn108.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:02 GMT
age: 1017006
x-served-by: cache-sjc10061-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 7354, 3859
x-timer: S1713501603.569670,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt4_orig.png | 74.115.51.8 | 200 OK | 525 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/bt4_orig.png IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typePNG image data, 766 x 538, 8-bit/color RGBA, non-interlaced Size525 kB (524758 bytes) Hashd4459385e93c5184e02493015150e692 a090eb0b889d31aa1af8c7e0dcaf757b72176f45 a9d06778f15e11559414582bda146b9fd2ac4957675fa422462862364b226bcf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/bt4_orig.png HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:01 GMT
content-type: image/png
content-length: 524758
cf-ray: 876a36d23a6cb515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "d4459385e93c5184e02493015150e692"
last-modified: Mon, 11 Oct 2021 13:05:06 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx00000eb72d20c50b09f1c-0066219cd6-e8f48a8-sfo1
x-rgw-object-type: Normal
x-storage-bucket: za9d0
x-storage-object: a9d06778f15e11559414582bda146b9fd2ac4957675fa422462862364b226bcf
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713475202 | 151.101.129.46 | 200 OK | 886 B |
URL GET HTTP/3cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713475202 IP151.101.129.46:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGlobalSign nv-sa Subject*.editmysite.com FingerprintEB:78:E3:F1:8B:7F:A7:B6:6E:FD:67:C0:E5:FC:79:E9:F4:7B:76:FA ValidityFri, 15 Mar 2024 23:17:45 GMT - Wed, 16 Apr 2025 23:17:44 GMT
File typeASCII text, with very long lines (2632) Hashb09e83d2aeac55c0d3b67186cd5009ff fa87cec84cc36fc2e70804867da24578ea331999 251a983a1b4b2cc76542aa398ae6b3499978a788860b54a8081d35d7a843303c
GET /css/free-footer-v3.css?buildtime=1713475202 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 886
server: nginx
content-type: text/css
last-modified: Thu, 18 Apr 2024 21:03:18 GMT
etag: "66218a96-a49"
expires: Thu, 02 May 2024 21:21:40 GMT
cache-control: max-age=1209600
x-host: blu91.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:40:02 GMT
age: 26302
x-served-by: cache-sjc1000128-SJC, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 35, 148
x-timer: S1713501603.615720,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (597) Size206 kB (206057 bytes) Hash8326c23d6b3eed35bc3e62f3294587fd edda17e74e53e85073e5eac9cb6be2163dbfa23c 57f03d3ba66117edc152646341120dd3a1d7d71b9a98a3723af5a8ae61bcb3ab
GET /recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://btinternet2022upgrade.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 206057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:55:24 GMT
expires: Tue, 15 Apr 2025 23:55:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 02:01:04 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 276278
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/background-images/1938267800.jpg | 74.115.51.8 | 200 OK | 5.0 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/uploads/1/4/0/9/140970616/background-images/1938267800.jpg IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 1 Hash00364a3cc7a0adf77a8d71313f0d9a16 ea9547a3420506bde5bb7dbc93d6dc5b73b22006 fb18fee36583b4eec419b20360038f3fae46cba56d3c795497443a354be36205
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /uploads/1/4/0/9/140970616/background-images/1938267800.jpg HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:03 GMT
content-type: image/jpeg
content-length: 4977
cf-ray: 876a36d67dbbb515-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
etag: "00364a3cc7a0adf77a8d71313f0d9a16"
last-modified: Mon, 29 Oct 2018 01:52:42 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx000000e7f4d94d57ffc97-0065da3bce-e8f44ee-sfo1
x-rgw-object-type: Normal
x-storage-bucket: zfb18
x-storage-object: fb18fee36583b4eec419b20360038f3fae46cba56d3c795497443a354be36205
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] | 74.115.51.8 | 200 OK | 10 kB |
URL POST HTTP/2btinternet2022upgrade.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typegzip compressed data, from Unix Hash777dc5ac878b6d5c7c86bb73e1775b02 41bf3f0d8e163a0a120f1c33f3de0ecbf459e4ff d85d6491733a50ad4d5f69f1979bc5ed183a228114a6f135533642c227b9aee0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://btinternet2022upgrade.weebly.com
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:03 GMT
content-type: application/json
cf-ray: 876a36d9af93b515-OSL
cf-cache-status: DYNAMIC
vary: X-W-SSL,User-Agent, Accept-Encoding
x-host: grn56.sf2p.intern.weebly.net
x-ua-compatible: IE=edge,chrome=1
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/files/theme/custom.js?1583952700 | 74.115.51.8 | 200 OK | 8.9 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/files/theme/custom.js?1583952700 IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typegzip compressed data, from Unix Hash12f842e8d7ff0ce8253a239a28a9d872 1291b4ae5bf27d58e959b70e04af8409f108db00 633ed40736a30ca5ff1f00f76274f527653be32111cd759d44026f38ab89e800
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /files/theme/custom.js?1583952700 HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:02 GMT
content-type: application/javascript
cf-ray: 876a36d24a78b515-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
content-encoding: gzip
etag: W/"031afc1e38df9f7a75040672e5d7625c"
last-modified: Tue, 29 Aug 2023 09:02:45 GMT
vary: Accept-Encoding
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx000004f8c7ffe641d9342-0065da7ef8-e95274c-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z66ea
x-storage-object: 66ea3b4259912ad511fddc6e8edd1a8aa28d7f623d14fc65e746146ab568a039
server: cloudflare
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/favicon.ico | 74.115.51.8 | 200 OK | 4.3 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/favicon.ico IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash4d27526198ac873ccec96935198e0fb9 b98d8b73ad6a0f7477c3397561b4aab37bf262aa 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:03 GMT
content-type: image/x-icon
cf-ray: 876a36d99f91b515-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
etag: W/"4d27526198ac873ccec96935198e0fb9"
last-modified: Tue, 05 Dec 2023 01:20:44 GMT
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx0000087a7d23e971b1841-0065d85f44-e8f4575-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z40a2
x-storage-object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Cabin:400,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 4.8 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Cabin:400,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (4950), with no line terminators Hashff2e02f71ba30a013aba18a18b06290a 6d9668e084a9620a40ca144a2a830f984074103c 8e8922043b1a794836d6750c84ab905a35977d003aa7cb66b268bc894e2de764
GET /css?family=Cabin:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 04:40:02 GMT
date: Fri, 19 Apr 2024 04:40:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 13 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash2b52ab6764afaf0fd5a310edc356411b 7668ac669f40376bc3cc9fb7baf8f731c0e0fc84 6d96667d2ad9a3ff4c5a0c69529cdf76a6462ea1731292f42ecd24dfcc0c3c62
GET /css?family=Roboto:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 04:40:02 GMT
date: Fri, 19 Apr 2024 04:40:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/files/main_style.css?1646311805 | 74.115.51.8 | 200 OK | 40 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/files/main_style.css?1646311805 IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typeASCII text, with very long lines (571) Hash5506d0cd67292b653be81ab9913d9d73 85cb19c28371fd62ebd6df27a0b9c13768ad2b25 e59b175aa9a6770cea869c5e624d1731218f0f83c47d43116ecf3e08e8dbcba0
GET /files/main_style.css?1646311805 HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:01 GMT
content-type: text/css
cf-ray: 876a36d22a66b515-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-host: blu151.sf2p.intern.weebly.net
server: cloudflare
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext | 142.250.74.106 | 200 OK | 4.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext IP142.250.74.106:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (4445), with no line terminators Hash4dc726831b9cab408374b574c4e162ea 91453cf95d5d02622d4e1a27fe2c7ba73b54616b f1f596106224f074116abe86e44089eb24112c7d3a66727c9c605c0b51e31b4e
GET /css?family=Lato:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 04:40:02 GMT
date: Fri, 19 Apr 2024 04:40:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?_=1713501602573 | 142.250.74.164 | 200 OK | 850 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?_=1713501602573 IP142.250.74.164:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (850), with no line terminators Hash7c792e0e26e2bd74f8e53c7da0d6b8a2 a43099555724ee257f66ca05de55cb56a14c8fca d782a59ef4bab02833ce95b5e9c9bd622f328683659f43a34f1dbcf54f1d4443
GET /recaptcha/api.js?_=1713501602573 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 19 Apr 2024 04:40:02 GMT
date: Fri, 19 Apr 2024 04:40:02 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/files/theme/plugins.js?1583952700 | 74.115.51.8 | 200 OK | 68 kB |
URL GET HTTP/2btinternet2022upgrade.weebly.com/files/theme/plugins.js?1583952700 IP74.115.51.8:443
Requested byhttps://btinternet2022upgrade.weebly.com/ CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typeJavaScript source, ASCII text Hash64497d2ab794cdb5e3c5c86cf7c5a611 34acd67927409d0795ee025f64f99757494affed 637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET /files/theme/plugins.js?1583952700 HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btinternet2022upgrade.weebly.com/
Cookie: is_mobile=0; language=en; __cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:02 GMT
content-type: application/javascript
cf-ray: 876a36d24a77b515-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
content-encoding: gzip
etag: W/"64497d2ab794cdb5e3c5c86cf7c5a611"
last-modified: Mon, 06 Nov 2023 20:55:13 GMT
vary: Accept-Encoding
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-amz-request-id: tx000003a09f8cde1341460-0065d86530-e9549c7-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z637b
x-storage-object: 637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702
server: cloudflare
X-Firefox-Spdy: h2
|
|
| btinternet2022upgrade.weebly.com/ | 74.115.51.8 | 200 OK | 24 kB |
URL User Request GET HTTP/2btinternet2022upgrade.weebly.com/ IP74.115.51.8:443
CertificateIssuerLet's Encrypt Subjectweebly.com Fingerprint27:81:F4:13:60:E0:2E:AE:D1:77:5E:AB:E7:F1:C9:4F:35:75:36:19 ValidityWed, 06 Mar 2024 20:19:02 GMT - Tue, 04 Jun 2024 20:19:01 GMT
File typeHTML document, ASCII text, with very long lines (887), with CRLF, LF line terminators Hashcba5c1c161197f4cc4a1a615b49f0bce 3a250b55cf782d163ddc15369912723e29d8397f b7a6cf6cd51c8eeff750d5ea67e63a0f68f5755e38628599a5682b397b3ac22f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: btinternet2022upgrade.weebly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:40:01 GMT
content-type: text/html; charset=UTF-8
cf-ray: 876a36cf589ab515-OSL
cf-cache-status: DYNAMIC
cache-control: private
vary: X-W-SSL,Accept-Encoding,User-Agent
x-host: blu115.sf2p.intern.weebly.net
x-ua-compatible: IE=edge,chrome=1
set-cookie: is_mobile=0; path=/; domain=btinternet2022upgrade.weebly.com
language=en; expires=Fri, 03-May-2024 04:40:01 GMT; Max-Age=1209600; path=/
__cf_bm=XGHw0eLVWutLlRIHC9XHU6GHUXt12AhoKnl3BQyVEqI-1713501601-1.0.1.1-VnjZQvzFx836_GTx2DaYQtYwWBI9ECWVi4ziOmEP5GDqQB5VzTQl2186h77AbLGpEOGebWzhlcocnUWr0LVIsg; path=/; expires=Fri, 19-Apr-24 05:10:01 GMT; domain=.weebly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0