WEBSITE ANALYSIS REPORT

http://page-netcoins-us-en.square.site/

22 Aug 2026 · 15:44:36.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:43:47.204 GET 200 document 46.6 KB 476 ms 2 alerts

15:43:48.249 GET 200 stylesheet 149.0 KB 66 ms —

15:43:48.253 GET 200 script 13.0 KB 259 ms —

15:43:48.255 GET 200 script 61.7 KB 51 ms —

15:43:48.258 GET 200 script 171.6 KB 69 ms —

15:43:48.260 GET 200 script 1.17 MB 114 ms —

15:43:48.263 GET 200 script 2.88 MB 207 ms —

15:43:48.266 GET 200 script 65.6 KB 102 ms —

15:43:48.269 GET 200 stylesheet 29.3 KB 21 ms —

15:43:48.271 GET 200 script 73.3 KB 28 ms —

15:43:48.572 GET 200 script 3.83 MB 43 ms —

15:43:48.574 GET 200 font 21.1 KB 12 ms —

15:43:48.577 POST 200 xhr 2 B 516 ms —

15:43:48.580 OPTIONS 200 xhr 0 B 689 ms —

15:43:48.582 GET 200 fetch 18.4 KB 10 ms —

15:43:48.584 GET 200 fetch 2.5 KB 10 ms —

15:43:48.940 GET 200 stylesheet 20.8 KB 22 ms —

15:43:48.944 GET 200 script 1010 B 53 ms —

15:43:49.139 GET 204 fetch 0 B 282 ms 2 alerts

15:43:49.150 GET 200 fetch 255 B 3611 ms —

15:43:49.550 GET 200 script 11.2 KB 10 ms —

15:43:49.554 GET 200 script 16.8 KB 10 ms —

15:43:49.555 GET 200 script 7.5 KB 10 ms —

15:43:49.560 GET 200 stylesheet 2.0 KB 10 ms —

15:43:49.562 GET 200 script 20.4 KB 10 ms —

15:43:49.608 GET 200 script 322.6 KB 18 ms —

15:43:49.652 GET 200 fetch 216 B 265 ms 2 alerts

15:43:49.691 POST 200 xhr 861 B 864 ms 2 alerts

Transaction #18

Request / response

URL

POST HTTPS

https://page-netcoins-us-en.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]

IP / ASN

74.115.51.5

AS27647 · WEEBLY

Requested by: https://page-netcoins-us-en.square.site/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 09 Apr 2025 · 10:18:40.967 UTC
Last seen (UTC): 23 Oct 2026 · 21:21:45.490 UTC
Times seen: 309

Size: 861 B (861 bytes)
MD5: f16c077ce6a64100a33623610f9f997a
SHA1: 2c03673b9e0c719f4db27ee97d37e2421e777eb8
SHA256: cdaf8509e3725449816677872b2bdcfe1ef7028df11b6a49880d85dff70be940

Certificate information

Issuer: Let's Encrypt · YE2
Subject: square.site
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 19:BB:7C:4E:F2:F9:4B:3B:EC:C4:77:64:13:30:47:41:6C:A0:91:1E
Valid from: Sun, 05 Jul 2026 16:59:16 GMT
Valid until: Sat, 03 Oct 2026 16:59:15 GMT

Technology fingerprints

Cloudflare Bot Management (Security)
Cloudflare (CDN)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: page-netcoins-us-en.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: application/json
Client-Application-Name: prime-website
X-XSRF-TOKEN: eyJpdiI6IldLWE1QdkZGZm0rSnFRV2ZxWEpKQlE9PSIsInZhbHVlIjoiMDVCZytxMks3NFZEK1ZRQTU4UGd5R3BCMm5QMDFkQm0zREdyVzdqeER2N0s4YXdIUHBhU1lKR09JdXQweDgvUFF3QnFXRHhKMjNReTlRcTh0SHQwaFVWdG5USE5lTmkwQ3owMCtUcFhGRXBwQmVNb0wwVHdxVFhTb3FrNjhXQ3oiLCJtYWMiOiI2ZGZhYmUyN2U5OTViYmU4MzgyN2YzMzUxYzcwMDZiMGY5YzdhZGI0YjM2NzZmODk1ZGIzOGNiODYyZTE3ODVlIiwidGFnIjoiIn0=
traceparent: 00-000000000000000078b7b7fd34d1aad7-03622eded137f634-00
x-datadog-origin: rum
x-datadog-parent-id: 243808864359151156
x-datadog-sampling-priority: 0
x-datadog-trace-id: 8698623503430167255
Content-Length: 78
Origin: https://page-netcoins-us-en.square.site
Sec-GPC: 1
Connection: keep-alive
Referer: https://page-netcoins-us-en.square.site/
Cookie: _snow_ses.5f32=*; _snow_id.5f32=178088bc-31c7-45c8-83d5-8822116103d2.1787413429.1.1787413429.1787413429.99b6e91f-a77c-4678-94a0-178a25ed5c78; publishedsite-xsrf=eyJpdiI6IjBRRmk1U0hjQlFOTytramx6L2dUVFE9PSIsInZhbHVlIjoiYTlJb2xQRXZiZ3EvRDQ0bk9qSWRxQlAxM29xN1JCdDh3bzhTKytMVlVKNmdQcnJSbGpTWGJLYm5Mb0pScFJIZDlzYWkyWlQwR0lENStDNWY5SFFZUy81UzlvQU9qejQ1ckpuUzhWTU10b0pDdEUxbmkzbWZ4NkdnQjZOaFRqR20iLCJtYWMiOiJhNWUxOGQ1NDFmZDI5Y2E2ZjY1ZTJhYmM2ZWUwNDM3MDNlZTQ3MmIwNTExODNlNjM3ZTYwNDQ5MzgzZjIzN2U2IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IldLWE1QdkZGZm0rSnFRV2ZxWEpKQlE9PSIsInZhbHVlIjoiMDVCZytxMks3NFZEK1ZRQTU4UGd5R3BCMm5QMDFkQm0zREdyVzdqeER2N0s4YXdIUHBhU1lKR09JdXQweDgvUFF3QnFXRHhKMjNReTlRcTh0SHQwaFVWdG5USE5lTmkwQ3owMCtUcFhGRXBwQmVNb0wwVHdxVFhTb3FrNjhXQ3oiLCJtYWMiOiI2ZGZhYmUyN2U5OTViYmU4MzgyN2YzMzUxYzcwMDZiMGY5YzdhZGI0YjM2NzZmODk1ZGIzOGNiODYyZTE3ODVlIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ik1ZbWtITnFQVVFiYlJTamFFSmtlK0E9PSIsInZhbHVlIjoicVVlRklsdFB0YmxDYW90ZDdULzEvZ0hiVFp0L2lXWGgrL0tYWWoyWHFEcGZSR2NISzJxZWEycm1LT2NhY29LRjVFWmFEYWgxYkdiekI3dmJZVlA3MlRaaEovV2JpQmFuODFJVjlxZlhaY1ZoWHRKZXcxK2k5YXVOUzFWcXRSY1oiLCJtYWMiOiJkY2NjMDRkYjgxYWU5NTgzYmFiNzg4YzhjYTM1OTEzOTY1MGI0ZGY1ZjczM2Q5ZWMwYTZkMjQ5NzMzOGEyZGQ3IiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=d5482870-0723-4460-aab6-4efa8d2d37e0&created=1787413429459&expire=1787414329459
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sat, 22 Aug 2026 15:43:50 GMT
content-type: application/json
cf-ray: a2f2fecf8b1eb521-OSL
cf-cache-status: DYNAMIC
server: cloudflare
strict-transport-security: max-age=7776000
vary: X-W-SSL,User-Agent
x-cart-implementation: proxy
x-host: grn186.sf2p.intern.weebly.net
x-ua-compatible: IE=edge,chrome=1
set-cookie: __cf_bm=KUQwxkg8Q6aCZr5_RJssjDLV79WyJCL1O6C8WtScU4M-1787413429.6901093-1.0.1.1-ZuHfPJvacicBnm.VTXvu3BUpMHhdTzXYtg8vVA_pzdus2NCMZw0ElNKeqLl.lW7xKvEIPmFt3PFFtShesFfwKViTU7Xf2cSFj7aiJOcdc9kPmEG9b.W6rO3EzEo3XFFk; HttpOnly; SameSite=None; Secure; Path=/; Domain=square.site; Expires=Sat, 22 Aug 2026 16:13:50 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

Request body

Captured 78 B · Displayed 78 B

{"id":0,"jsonrpc":"2.0","method":"Checkout::getSquareStoreConfig","params":[]}

15:43:49.700 GET 200 font 22.2 KB 10 ms —

15:43:49.702 GET 200 font 22.3 KB 11 ms —

15:43:49.788 GET 200 xhr 61 B 279 ms 2 alerts

15:43:49.823 GET 200 fetch 7 B 4266 ms —

15:43:49.868 POST 200 xhr 2 B 170 ms —

15:43:49.895 OPTIONS 200 xhr 0 B 169 ms —

15:43:50.092 GET 200 xhr 192 B 325 ms —

15:43:50.497 POST 200 xhr 2 B 174 ms —

15:43:50.499 OPTIONS 200 xhr 0 B 170 ms —

15:43:50.502 GET 200 stylesheet 1.7 KB 10 ms —

15:43:50.512 GET 200 font 22.4 KB 11 ms —

15:43:50.654 GET 200 script 26.2 KB 11 ms —

15:43:50.656 GET 200 script 21.3 KB 12 ms —

15:43:50.658 GET 200 script 25.0 KB 10 ms —

15:43:50.660 GET 200 stylesheet 18.5 KB 11 ms —

15:43:50.663 GET 200 script 11.2 KB 12 ms —

15:43:50.664 GET 200 script 14.8 KB 11 ms —

15:43:50.667 GET 200 stylesheet 19.6 KB 11 ms —

15:43:50.671 GET 200 script 16.0 KB 11 ms —

15:43:50.673 GET 200 script 30.5 KB 11 ms —

15:43:50.679 GET 200 script 10.7 KB 11 ms —

15:43:50.680 GET 200 script 10.2 KB 11 ms —

http://page-netcoins-us-en.square.site/

Domain graph

Hostnames

Connections

Network requests

Transaction #18

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://page-netcoins-us-en.square.site/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #18

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://page-netcoins-us-en.square.site/

Domain graph

Network requests