WEBSITE ANALYSIS REPORT

https://welcome-trezr-suite.square.site

12 Oct 2026 · 23:48:51.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:48:00.162 GET 200 document 41.2 KB 3833 ms 4 alerts

23:48:04.610 GET 200 stylesheet 149.0 KB 215 ms —

23:48:04.615 GET 200 script 13.0 KB 451 ms —

23:48:04.637 GET 200 script 61.7 KB 290 ms —

23:48:04.640 GET 200 script 171.6 KB 461 ms —

23:48:04.645 GET 200 script 1.17 MB 5346 ms —

23:48:04.648 GET 200 script 2.88 MB 10520 ms —

23:48:04.651 GET 200 stylesheet 29.3 KB 149 ms —

23:48:04.658 GET 200 script 73.3 KB 203 ms —

23:48:04.897 GET 200 font 21.1 KB 2275 ms —

23:48:04.933 OPTIONS 200 xhr 0 B 684 ms —

23:48:05.087 GET 200 fetch 18.4 KB 45 ms —

23:48:05.088 GET 200 fetch 2.5 KB 44 ms —

23:48:09.034 GET 200 img 258 B 31 ms 4 alerts

23:48:09.036 GET 200 img 6.4 KB 26 ms 4 alerts

23:48:15.694 GET 204 fetch 0 B 213 ms 4 alerts

Transaction #36

Request / response

URL

GET HTTPS

https://welcome-trezr-suite.square.site/app/cms/ping

IP / ASN

74.115.51.4

AS27647 · WEEBLY

Requested by: https://welcome-trezr-suite.square.site/

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 08:29:54.921 UTC
Times seen: 19327488

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE1
Subject: square.site
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 49:72:BB:F8:77:CB:F2:2F:DF:C3:0F:E9:60:9E:B9:19:2B:C3:DE:25
Valid from: Wed, 02 Sep 2026 16:32:07 GMT
Valid until: Tue, 01 Dec 2026 16:32:06 GMT

Technology fingerprints

HSTS (Security)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /app/cms/ping HTTP/1.1
Host: welcome-trezr-suite.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://welcome-trezr-suite.square.site/
Sec-GPC: 1
Connection: keep-alive
Cookie: _snow_ses.6c1d=*; _snow_id.6c1d=bbc0bb9f-cead-49c2-8cf4-b7e91511bb1f.1791848885.1.1791848885.1791848885.6dc61f60-44fb-4172-a4ef-2325ae9ac3c0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 204 
date: Mon, 12 Oct 2026 23:48:15 GMT
cf-ray: a499fe8e1e255684-OSL
cf-cache-status: BYPASS
cache-control: no-cache, private
server: cloudflare
x-revision: bc8da6f199269f50608e4fbe033fe3cb02e9f3e6
strict-transport-security: max-age=7776000
x-host: grn148.sf2p.intern.weebly.net
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
x-request-id: ea3adba6f6b7323444022c0c8f7ffc72
set-cookie: publishedsite-xsrf=eyJpdiI6IkJIQ0o4MGZYTXMwUC9WTTlrWnFCa2c9PSIsInZhbHVlIjoiMVc1ekI3YjdCamJJRG9kOTRCdmxYTVJWY3k2WW1NNWhRNjk0alJoYVpBUFZHcHppZHduVGpHWkxXUUxKNENrNjQxN2s2Y3l1b1hiNm9scTZhRkJFTlJIZUM3YllueUhZM1hMaWhlMENGVjZsRjFVR1ZzOHhpZ3p6NlF2M2VtU1IiLCJtYWMiOiJiOTVmZTFiYzBkOTIxN2NhODBjNGI4ZTVkMWU4NmU1ZjcxYTJkM2MwZjdhNzQzNmI1MzBjNTgwODVhYWE3ODI3IiwidGFnIjoiIn0%3D; expires=Mon, 12 Oct 2026 23:58:15 GMT; Max-Age=600; path=/; secure; samesite=lax
XSRF-TOKEN=eyJpdiI6Ijhmanp1TlZYbWY4V25hamFWQnpGb3c9PSIsInZhbHVlIjoiakl5ZzIvUXc2UG9zNTFuMGd4N1F1NWJZRHJUMmJvelQyU3U3WGlHRjBWbjM0a1dyL3g2NHYyWkpHRy9CMC9MVWVOazR1NTJnQW00bVRRWTc3WHF5UzFURmRBV3BxS0NVQ1habEZrK2ROeXA2UjJwanMrMG9wUlMzQ2hxWkNIUGEiLCJtYWMiOiJhZmI0YzEyODJjYTNlNDcyYThlOTI2ZDk0MmFiZDBlMGJlNGE2MjQ5ZGNhMGNkYmRjNTY3MzJiN2JhZTY1ZTdkIiwidGFnIjoiIn0%3D; expires=Mon, 12 Oct 2026 23:58:15 GMT; Max-Age=600; path=/; secure; samesite=lax
PublishedSiteSession=eyJpdiI6IjNUNVhOQmNCMXFtSitVcTFYMVlWS1E9PSIsInZhbHVlIjoiamlqck52WVpDYWgySENSajVCdDJ1NGZrMis1Qi9EZGZINWFtZjlCZTlUUzF4R0RTS2V5VzBHS2x0YTlqTGU3M0xBbTdGbDJPZlRsZjY0bWpET2cyaXk2Q2ZITngvVGZPZjI5S2h2Q2RyV0N2SmIwL2dSYXFGejJVbUhxRXdxY3YiLCJtYWMiOiI0MjJlZTI4OWE2ODE1ZDRhY2I2YTg3MjA2ZTAyNmMyZmNkMGE4YTk1Nzc4NzEwOTU0OTA2OTI1M2I2NjEwYjA4IiwidGFnIjoiIn0%3D; expires=Mon, 12 Oct 2026 23:58:15 GMT; Max-Age=600; path=/; secure; httponly; samesite=lax
__cf_bm=SBiYoBIbj78xXPwWBUOQY7SXkwuKQek52WXscDEw96g-1791848895.693257-1.0.1.1-B0fpJlVerbNX_YrXYeSObgfQBiAY8MUZDgqISZ7WbMhak5sclAF0PPTJRSqg9zcbbbx5rm_WuPDfI3wpdN_x9IfxGRvlkzNpZTS6oj6nOFc.1jeYbPr0yp.EwyN8qs3F; HttpOnly; SameSite=None; Secure; Path=/; Domain=square.site; Expires=Tue, 13 Oct 2026 00:18:15 GMT
X-Firefox-Spdy: h2

23:48:15.969 GET 200 script 11.2 KB 46 ms —

23:48:15.972 GET 200 script 16.8 KB 46 ms —

23:48:15.974 GET 200 script 7.5 KB 46 ms —

23:48:15.977 GET 200 stylesheet 2.0 KB 46 ms —

23:48:15.978 GET 200 script 20.4 KB 46 ms —

23:48:16.021 GET 200 script 322.6 KB 418 ms —

23:48:16.046 GET 200 fetch 216 B 24 ms 4 alerts

23:48:16.088 POST 200 xhr 861 B 350 ms 4 alerts

23:48:16.096 GET 200 font 22.2 KB 97 ms —

23:48:16.097 GET 200 font 22.3 KB 102 ms —

23:48:16.126 GET 200 xhr 61 B 221 ms 4 alerts

23:48:16.360 GET 200 xhr 192 B 400 ms —

23:48:16.482 GET 200 fetch 7 B 278 ms —

23:48:16.488 OPTIONS 200 xhr 0 B 170 ms —

23:48:16.874 GET 200 stylesheet 1.7 KB 47 ms —

23:48:16.880 GET 200 font 22.4 KB 333 ms —

23:48:16.889 OPTIONS 200 xhr 0 B 170 ms —

23:48:16.892 GET 200 script 26.2 KB 402 ms —

23:48:16.893 GET 200 script 21.3 KB 411 ms —

23:48:16.896 GET 200 script 25.0 KB 455 ms —

23:48:16.897 GET 200 stylesheet 18.5 KB 74 ms —

23:48:16.899 GET 200 script 11.2 KB 487 ms —

23:48:16.902 GET 200 script 14.8 KB 483 ms —

23:48:16.904 GET 200 stylesheet 19.6 KB 73 ms —

23:48:16.905 GET 200 script 16.0 KB 491 ms —

23:48:16.907 GET 200 script 30.5 KB 524 ms —

23:48:16.908 GET 200 script 10.7 KB 531 ms —

23:48:16.909 GET 200 script 10.2 KB 561 ms —

23:48:16.912 GET 200 stylesheet 26.2 KB 104 ms —

23:48:16.914 GET 200 script 101.5 KB 608 ms —

23:48:16.917 GET 200 script 21.9 KB 643 ms —

23:48:16.919 GET 200 script 21.5 KB 643 ms —

23:48:16.921 GET 200 stylesheet 26.9 KB 100 ms —

23:48:16.923 GET 200 script 83.8 KB 782 ms —

https://welcome-trezr-suite.square.site

Domain graph

Hostnames

Connections

Network requests

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://welcome-trezr-suite.square.site

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://welcome-trezr-suite.square.site

Domain graph

Network requests