Err, more PIIs taking.
I repeated the test above for webwise.bt.com.
From Gyron servers (no modification to hosts file);
GET http://webwise.bt.com/webwise/css/global.css HTTP/1.1
<snip irrelevant headers>
HTTP/1.1 200 OK
Date: Wed, 19 Dec 2007 12:16:54 GMT << SAME DATE TIME AS BELOW
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Wed, 19 Dec 2007 12:16:54 GMT << SAME DATE TIME AS ABOVE
<snip irrelevant headers>
Using PSInet address (38.105.138.154)
GET http://webwise.bt.com/webwise/css/global.css HTTP/1.1
<snip irrelevant headers>
HTTP/1.1 200 OK
Date: Thu, 19 Jun 2008 22:03:43 GMT << CURRENT DATE
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Fri, 23 May 2008 14:09:47 GMT << HISTORIC DATE
<snip irrelevant headers>
Looks a lot like the Gyron server is a proxy to me.
Please anyone able to confirm my analysis and opinion?
If I'm right this is worse than very bad. Its more bad than a bad thing on a bad day in a bad year.