urlquery.net
WEBSITE ANALYSIS REPORT

https://welcome-trezr-suite.square.site

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document41.2 KB3833 ms4 alerts
GET200stylesheet149.0 KB215 ms—
GET200script13.0 KB451 ms—
GET200script61.7 KB290 ms—
GET200script171.6 KB461 ms—
GET200script1.17 MB5346 ms—
GET200script2.88 MB10520 ms—
GET200stylesheet29.3 KB149 ms—
GET200script73.3 KB203 ms—
GET200font21.1 KB2275 ms—
OPTIONS200xhr0 B684 ms—
GET200fetch18.4 KB45 ms—
GET200fetch2.5 KB44 ms—
GET200img258 B31 ms4 alerts
GET200img6.4 KB26 ms4 alerts
GET204fetch0 B213 ms4 alerts
GET200script11.2 KB46 ms—
GET200script16.8 KB46 ms—
GET200script7.5 KB46 ms—
GET200stylesheet2.0 KB46 ms—
GET200script20.4 KB46 ms—
GET200script322.6 KB418 ms—
GET200fetch216 B24 ms4 alerts

Transaction #40

Request / response

URL

GET HTTPS
https://welcome-trezr-suite.square.site/app/website/static/icons/sets/square/chevron-left.svg

IP / ASN

United States 74.115.51.4

AS27647 · WEEBLY

Requested by
https://welcome-trezr-suite.square.site/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
CIRA Canadian Shield DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /app/website/static/icons/sets/square/chevron-left.svg HTTP/1.1
Host: welcome-trezr-suite.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://welcome-trezr-suite.square.site/
Sec-GPC: 1
Connection: keep-alive
Cookie: _snow_ses.6c1d=*; _snow_id.6c1d=bbc0bb9f-cead-49c2-8cf4-b7e91511bb1f.1791848885.1.1791848885.1791848885.6dc61f60-44fb-4172-a4ef-2325ae9ac3c0; publishedsite-xsrf=eyJpdiI6IkJIQ0o4MGZYTXMwUC9WTTlrWnFCa2c9PSIsInZhbHVlIjoiMVc1ekI3YjdCamJJRG9kOTRCdmxYTVJWY3k2WW1NNWhRNjk0alJoYVpBUFZHcHppZHduVGpHWkxXUUxKNENrNjQxN2s2Y3l1b1hiNm9scTZhRkJFTlJIZUM3YllueUhZM1hMaWhlMENGVjZsRjFVR1ZzOHhpZ3p6NlF2M2VtU1IiLCJtYWMiOiJiOTVmZTFiYzBkOTIxN2NhODBjNGI4ZTVkMWU4NmU1ZjcxYTJkM2MwZjdhNzQzNmI1MzBjNTgwODVhYWE3ODI3IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ijhmanp1TlZYbWY4V25hamFWQnpGb3c9PSIsInZhbHVlIjoiakl5ZzIvUXc2UG9zNTFuMGd4N1F1NWJZRHJUMmJvelQyU3U3WGlHRjBWbjM0a1dyL3g2NHYyWkpHRy9CMC9MVWVOazR1NTJnQW00bVRRWTc3WHF5UzFURmRBV3BxS0NVQ1habEZrK2ROeXA2UjJwanMrMG9wUlMzQ2hxWkNIUGEiLCJtYWMiOiJhZmI0YzEyODJjYTNlNDcyYThlOTI2ZDk0MmFiZDBlMGJlNGE2MjQ5ZGNhMGNkYmRjNTY3MzJiN2JhZTY1ZTdkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IjNUNVhOQmNCMXFtSitVcTFYMVlWS1E9PSIsInZhbHVlIjoiamlqck52WVpDYWgySENSajVCdDJ1NGZrMis1Qi9EZGZINWFtZjlCZTlUUzF4R0RTS2V5VzBHS2x0YTlqTGU3M0xBbTdGbDJPZlRsZjY0bWpET2cyaXk2Q2ZITngvVGZPZjI5S2h2Q2RyV0N2SmIwL2dSYXFGejJVbUhxRXdxY3YiLCJtYWMiOiI0MjJlZTI4OWE2ODE1ZDRhY2I2YTg3MjA2ZTAyNmMyZmNkMGE4YTk1Nzc4NzEwOTU0OTA2OTI1M2I2NjEwYjA4IiwidGFnIjoiIn0%3D; _dd_s=rum=0&expire=1791849795959
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Mon, 12 Oct 2026 23:48:16 GMT
content-type: image/svg+xml
cf-ray: a499fe904f6a5684-OSL
cf-cache-status: HIT
etag: W/"6ac934ed-d8"
age: 90186
cache-control: max-age=315360000
set-cookie: __cf_bm=ffMi74Y51noaeKg7qP0TClG5n1ElS6e3cWPgt9623bE-1791848896.045181-1.0.1.1-YDrGuOspWxg0cRsmfrgHfLB90B2jwdASE6I8pFq5sdqet4GX6fdVtZemfNTKTSylKMXb7RF_0uerhVmLMsnczlCSstpIsi9ZULLBC82AF8N9SHyZnhmE5qFdyJeZhS.7; HttpOnly; SameSite=None; Secure; Path=/; Domain=square.site; Expires=Tue, 13 Oct 2026 00:18:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Fri, 09 Oct 2026 18:39:41 GMT
server: cloudflare
strict-transport-security: max-age=7776000
x-host: blu61.sf2p.intern.weebly.net
x-request-id: a5dc07e65cd1625b22041524facad784
x-revision: bc8da6f199269f50608e4fbe033fe3cb02e9f3e6
content-encoding: gzip
X-Firefox-Spdy: h2

POST200xhr861 B350 ms4 alerts
GET200font22.2 KB97 ms—
GET200font22.3 KB102 ms—
GET200xhr61 B221 ms4 alerts
GET200xhr192 B400 ms—
GET200fetch7 B278 ms—
OPTIONS200xhr0 B170 ms—
GET200stylesheet1.7 KB47 ms—
GET200font22.4 KB333 ms—
OPTIONS200xhr0 B170 ms—
GET200script26.2 KB402 ms—
GET200script21.3 KB411 ms—
GET200script25.0 KB455 ms—
GET200stylesheet18.5 KB74 ms—
GET200script11.2 KB487 ms—
GET200script14.8 KB483 ms—
GET200stylesheet19.6 KB73 ms—
GET200script16.0 KB491 ms—
GET200script30.5 KB524 ms—
GET200script10.7 KB531 ms—
GET200script10.2 KB561 ms—
GET200stylesheet26.2 KB104 ms—
GET200script101.5 KB608 ms—
GET200script21.9 KB643 ms—
GET200script21.5 KB643 ms—
GET200stylesheet26.9 KB100 ms—
GET200script83.8 KB782 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot