199.34.228.40200 OK 10 kB URL User Request GET HTTP/1.1 IP 199.34.228.40:443
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (22156)
Hash 592d77190dbe25d6df3995e3e7e362f5
2231389523f2b6aef24acdec99b60933d3820b11
71d316d2a21ad2f4341d7b659253b4e8422772dcf7e649f1119ae6a8c68c1362
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET / HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Thu, 30 Nov 2023 01:23:34 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
X-Host: grn42.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 45ce1fe37e3836f64724b4ea2a8830ff
Content-Encoding: gzip
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css
151.101.1.46200 OK 0 B URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Tue, 31 Oct 2023 14:45:11 GMT
etag: "654112f7-0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 2541961
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1701307422.297395,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 0
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js
151.101.1.46200 OK 5.1 kB URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12165)
Hash a7492af09b397dae7164c97ee2d4482d
fd33d97b8e2581b90521c871926a1c081b9f2158
099183900da1f3584590a1506bd27e8d07ef58380e03140f18c71f09c9216703
GET /app/checkout/assets/checkout/js/system.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 13 Jul 2023 19:54:24 GMT
x-rgw-object-type: Normal
etag: W/"a7492af09b397dae7164c97ee2d4482d"
x-amz-request-id: tx0000011d33b4e3e68a420-0064b0569b-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 121163
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1701307422.297418,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5122
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.6c880ec1883128b81ca4.js
151.101.1.46200 OK 29 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/runtime.6c880ec1883128b81ca4.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (56049)
Hash da78e40f7c94a50029f59f146cc039f6
75031d6415ee5746b1c0af018b4e848e03145d22
638a13dbcd4a225eece337bac7fb1bb37045fdf425fe6e9f7cc501e2319a5ff3
GET /app/website/js/runtime.6c880ec1883128b81ca4.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 00:29:36 GMT
x-rgw-object-type: Normal
etag: W/"da78e40f7c94a50029f59f146cc039f6"
x-amz-request-id: tx000005bd9b86d7650bcf6-006567d7e0-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.6c880ec1883128b81ca4.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 6aa6ea047203d044e400b65df21241cedf90d222
x-request-id: 21af73d1877fdb21b522a4e1678519df
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 3103
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 4
x-timer: S1701307422.299210,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29422
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
151.101.65.46200 OK 26 kB URL GET HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP 151.101.65.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2512)
Hash 99bbe560926e583b8e99036251deb783
8d81b73ae06f664f9d9e53dd5829a799bf434491
648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:01 GMT
etag: "655e8689-124fe"
expires: Thu, 07 Dec 2023 08:49:33 GMT
cache-control: max-age=1209600
x-host: blu145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
age: 578048
x-served-by: cache-sjc10061-SJC, cache-bma1676-BMA
x-cache: HIT, HIT
x-cache-hits: 52, 26
x-timer: S1701307422.303614,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/vue-modules.72df5f47735d125461d0.js
151.101.1.46200 OK 72 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.72df5f47735d125461d0.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (26504)
Hash c5801db07f71d754cac8bdc5e334d0df
8840f7abdc5fbb05a77bc7ecedfa0234a7b75211
45ed00c7aba9eea53670aca3f962ac68c38ec776a3c2ababdcfbc4b6d42438ea
GET /app/website/js/vue-modules.72df5f47735d125461d0.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:16 GMT
x-rgw-object-type: Normal
etag: W/"c5801db07f71d754cac8bdc5e334d0df"
x-amz-request-id: tx00000d29fd2edab25e9af-006552c0ae-db1a132-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.72df5f47735d125461d0.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: 708a0243f51691993ea40890f9b77fcf
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 1385297
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 11
x-timer: S1701307422.299505,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72077
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.5142def2dd257dd6b4c5.css
151.101.1.46200 OK 38 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/css/site.5142def2dd257dd6b4c5.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (64828), with no line terminators
Hash cc676f6d0f6a8d9f49bcfc9868b62a81
a93fa14928880bfa57e2e3a50a9560eb447c7c00
16e724615cd4cb392fda92e87de8a7252f066fb1a761103db3634347aa40273d
GET /app/website/css/site.5142def2dd257dd6b4c5.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 22 Nov 2023 21:05:10 GMT
x-rgw-object-type: Normal
etag: W/"cc676f6d0f6a8d9f49bcfc9868b62a81"
x-amz-request-id: tx00000e4a92ec7abdb58d9-00655e6d6e-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 4e0898ce440a49decc308c091c9441ba3edb60c8
x-request-id: 651276ab54702bc5d92b90cfc8ae0f1c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 620141
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1701307422.300518,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 38432
X-Firefox-Spdy: h2
bt-108394.weeblysite.com/
162.159.140.60302 Found 318 kB URL User Request GET HTTP/2 bt-108394.weeblysite.com/
IP 162.159.140.60:443
Certificate IssuerCloudflare, Inc.
Subjectweeblysite.com
FingerprintB1:46:C7:51:E8:C2:74:1A:AE:4E:AD:99:BF:5E:02:6E:F0:83:81:EF
ValidityFri, 29 Sep 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
Size 318 kB (317702 bytes)
Hash dd7ff852b73b8d7a11ecdf31f47daa0c
8a53f5985642e5efed19800aa4414f219a591528
abf24dfe5aa44ca57c3a01d970a634cd01ccf5be8b9f8ec1d8a3ff1a6f7695f1
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET / HTTP/1.1
Host: bt-108394.weeblysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Nov 2023 01:23:41 GMT
content-type: text/html; charset=UTF-8
location: https://bt-108394.square.site/
cf-ray: 82df4951b89f5688-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
x-host: grn135.sf2p.intern.weebly.net
x-request-id: 48919c081290900065b4c0726af569e5
x-revision: 6aa6ea047203d044e400b65df21241cedf90d222
set-cookie: publishedsite-xsrf=eyJpdiI6IjdZK25jTWM2M1R4ZGtzc0t4UTdMN1E9PSIsInZhbHVlIjoiUFAxSk1uazJVaGVvaDh2RmRmdXR5NkFWT3hkSWROREtTd1ZVWndzSUU3WmZESENrNlJkbDJydER2VXA4UVE0Q0t3cE5wV1ZCK0xzNjVMU3N3bXVxL1hFLzdwTm55L3BiQi9pU043cE5GeFVhRjRGZGQ1dStVclBHOUhBMlQ0bE0iLCJtYWMiOiI5MzE3OWUxODg3ZGE2ODgzNGYyYjc3MzIzNmM3MTBjZGEzNDIyY2IyNzQ1YzcxMjljMDJmNGJkZTZjYTFhOWY1IiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6Iiswb0xINjlUMHN1My9TQ2t1bmI2WUE9PSIsInZhbHVlIjoiSnFFcEdUTnZvVXcwMTJrZlYzN0d3eWRybEZKbDBGaDdqMHp5TTFYUzNUQ0FSSWFvNkx0eVNSQXEyWFNPMldoVkFQZk9XNkUrZmRrdFZpNTFxbmJuM043R2tsQW90c1YzSnZoWi9hOG9kSC93eWZPT3BQcTNVbEpFcGI5ZHg1dmIiLCJtYWMiOiJlZTU0YjkwMzcyNjI0N2NkOTM1M2UzM2RkMTNmMTJhNWE0YTUyZDMzNTg4ZjE4ZTIyYTI0NjBjZThjMTRmNGRiIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6IjlPbXpNdUVBUzhaa1lsQUowTEVsckE9PSIsInZhbHVlIjoiV2VYNXZVTzJHSmZtY0tJYXh4QXlSdlZiYUJkbElrTGk2THExajlRUm5QR24zT3U1dnZWdzE3Mnp2T09pVTVUdnVnR2R0bldSWVcwMDcxdzFRSzR1YUJxWWM0Yzk4aW13VTFFM3ZGeThLMEw1TFI5UVFlSlYrZW9NdHpJUWV6dGIiLCJtYWMiOiJjYTJkYjg1ZmVlZDNjMzcxOGIzMzJhZDk1Yzc5YTgwZjdlZjFmNDdhYWMyZDJiZTU3NWY0MDBlMWQxNmZhMjhkIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:41 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
__cf_bm=noENyAnvABIhYZVBAu8rIzeJoqV1ZJjwo50pC.cDOxc-1701307421-0-AXjbh9oNsuG/5RaFzwIrnl6fLn+FNmhYrum16Y0x3FqHJUla9BlUrns3s5JeH9bctzUGyKPEOCAi3NDyb5/1K3A=; path=/; expires=Thu, 30-Nov-23 01:53:41 GMT; domain=.weeblysite.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/site.d57db83d718e6d61e603.js
151.101.1.46200 OK 982 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/site.d57db83d718e6d61e603.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (49237)
Size 982 kB (981776 bytes)
Hash d4990c7e9eca7c7ac2993580bb65fea5
7fc496070deae4a52e7e58f2a43b898d38e6eeaf
5b68e69310b4da703551b362563fa16b9de680eb0f465257550dd8eb8b66bed5
GET /app/website/js/site.d57db83d718e6d61e603.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 00:29:36 GMT
x-rgw-object-type: Normal
etag: W/"d4990c7e9eca7c7ac2993580bb65fea5"
x-amz-request-id: tx00000cd163806a71ae83b-006567d7e1-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.d57db83d718e6d61e603.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 6aa6ea047203d044e400b65df21241cedf90d222
x-request-id: 78ae8b7287d111054a94e790b769573c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 3103
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307422.305369,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 981776
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.24d762f8232a6811.js
151.101.1.46200 OK 4.1 kB URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.24d762f8232a6811.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type JSON data\012- , ASCII text, with very long lines (18701), with no line terminators
Hash dc87095a2d014fdd32cb6057f1d884b2
606b8c7d9632d552d72ec3b77041afaed0ea5454
c7c2fb4bba627d1ab604106aa8fe87323d566c8df2ac734a7e4a6351fc3e1aa3
GET /app/checkout/assets/checkout/imports.en.24d762f8232a6811.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 23:06:45 GMT
x-rgw-object-type: Normal
etag: W/"dc87095a2d014fdd32cb6057f1d884b2"
x-amz-request-id: tx000005ec3299d42b707d3-006567c4ce-db1a051-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/imports.en.24d762f8232a6811.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 7911
x-served-by: cache-bma1635-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1701307423.706400,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4092
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json
151.101.1.46200 OK 677 B URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type JSON data\012- , ASCII text, with very long lines (2521), with no line terminators
Hash 47151733aa42eb6c4b78edb484819e33
cf2f241e5230948723d201e7a9690fa7c59a3021
dbd27f07a349678ce4cefb990e5b8d968105087b59901dc2c68ef9f204efd72c
GET /app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/json
last-modified: Wed, 29 Nov 2023 16:41:11 GMT
etag: W/"656769a7-9d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 29400
x-served-by: cache-bma1635-BMA
x-cache: HIT
x-cache-hits: 15
x-timer: S1701307423.717725,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 677
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/36368.a0885747ef22882e2115.js
151.101.1.46200 OK 4.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/36368.a0885747ef22882e2115.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (6439)
Hash 80cd6e5fa9e016e62ae97ab8a483864a
e4b79b1bec1918ea35ab9950ae05e20e729db31d
ff22b70f37e38ac8a9ccc340f49e3d6354d4f7ee9df6760db98961aeb0b8cdd8
GET /app/website/js/36368.a0885747ef22882e2115.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4803
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"80cd6e5fa9e016e62ae97ab8a483864a"
x-amz-request-id: tx000006abb1c8219ae794c-00656788ba-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/36368.a0885747ef22882e2115.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 6f18bf67536f0b1574c7f7a0b22b9161
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:43 GMT
via: 1.1 varnish
age: 23279
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1701307423.351375,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/54928.e7bf6478b85daa8fa544.js
151.101.1.46200 OK 6.5 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/54928.e7bf6478b85daa8fa544.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (16347)
Hash aeee6779a5412fb377172c90307e8976
1603bb9093a4fbffc4bb27d5d837540e42ae3542
d00d0a9aed8b5359b7e7e4cbce1200c08dfdd977350ae34c16c4ccc2747f56d7
GET /app/website/js/54928.e7bf6478b85daa8fa544.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6517
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"aeee6779a5412fb377172c90307e8976"
x-amz-request-id: tx0000067ac8f64c5439322-00656788bc-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/54928.e7bf6478b85daa8fa544.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 17f8463eef382b3501ea6ba6b10ae91a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:43 GMT
via: 1.1 varnish
age: 23279
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307423.369314,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/home-page.74bc6c44281c650698a8.css
151.101.1.46200 OK 409 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/home-page.74bc6c44281c650698a8.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (924), with no line terminators
Hash c15f76990b289605f4ed83b445dae60c
1794f43d0196f4a89af357e77fdb07bd0b4b4166
bac55151545a69c7126cb8e8bfef99e07e0f595a9d07f9003e3d8420ba2964d3
GET /app/website/css/home-page.74bc6c44281c650698a8.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 409
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 02 Nov 2023 20:02:40 GMT
x-rgw-object-type: Normal
etag: W/"c15f76990b289605f4ed83b445dae60c"
x-amz-request-id: tx000003bc82c6d3699a0c5-00654400c3-db1a051-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b7bf12796623a77cb2c69586f70d87852128c2d
x-request-id: 45db360985042861c9072bef66209f02
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:43 GMT
via: 1.1 varnish
age: 2351932
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307423.375099,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/home-page.9b2fc1df7eabd1fadc6f.js
151.101.1.46200 OK 6.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/home-page.9b2fc1df7eabd1fadc6f.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (20664)
Hash 119891e91dc5b48b34da95af18b35c68
f512859e0bf96f4adaf4e7d7acd6a61981c9628d
5de63b9a99d89052c8ed5b98d51ba66723b59dcb21ce496991f89f205544af6e
GET /app/website/js/home-page.9b2fc1df7eabd1fadc6f.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6159
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:48 GMT
x-rgw-object-type: Normal
etag: W/"119891e91dc5b48b34da95af18b35c68"
x-amz-request-id: tx000003ac8404c76ca7b34-00656788b6-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/home-page.9b2fc1df7eabd1fadc6f.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 884e184f78366e74338184fcb5ecfea8
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:43 GMT
via: 1.1 varnish
age: 23279
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307423.375078,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/50774.6c28066e367c03654887.js
151.101.1.46200 OK 3.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/50774.6c28066e367c03654887.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4205)
Hash d20cbf69f007b8d1a7e8f6c79060f98f
0d08302f9133d6a4d595b5fff05ec630ae301665
fa991b9e12855b1f0af284a15ecdb243c51b0fe3f56c30b87a698bf62f190d5f
GET /app/website/js/50774.6c28066e367c03654887.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3600
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"d20cbf69f007b8d1a7e8f6c79060f98f"
x-amz-request-id: tx000004a6c4942eccbc94d-00656788ba-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/50774.6c28066e367c03654887.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: e2b74204c593cc10b20c5509925f4124562dfcb9
x-request-id: fa5854094da2760d78a7faa8b5240d42
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:43 GMT
via: 1.1 varnish
age: 23279
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307423.375111,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
35.186.247.156200 OK 2 B URL POST HTTP/2 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP 35.186.247.156:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subjectsentry.io
Fingerprint18:3C:11:53:56:65:8B:09:02:F1:6B:26:E3:C2:C9:37:E0:E8:72:98
ValidityTue, 08 Aug 2023 00:00:00 GMT - Sat, 07 Sep 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
Content-Type: text/plain;charset=UTF-8
Content-Length: 429
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 30 Nov 2023 01:23:43 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bt-108394.square.site/app/website/static/icons/sets/square/chevron-left.svg
199.34.228.40200 OK 216 B URL GET HTTP/1.1 bt-108394.square.site/app/website/static/icons/sets/square/chevron-left.svg
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6aa1efc78eeaabc61f81143850c56a20
785cfb7866be5b416bd474d6c4bcac5e25b61487
00c629ac07a53a8dd92ace0c212743ef17337c75436767830a81b66c246e3074
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/static/icons/sets/square/chevron-left.svg HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 7142814719287014797
x-datadog-sampling-priority: 1
x-datadog-trace-id: 1063343247282432467
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:43 GMT
Content-Type: image/svg+xml
Content-Length: 216
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "6aa1efc78eeaabc61f81143850c56a20"
x-amz-request-id: tx0000080c99ee26697e2f8-0064386dba-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn42.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 77c041bab8f9ef0819dcd88eb93d91eb
bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
199.34.228.40200 OK 955 B URL POST HTTP/1.1 bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (955), with no line terminators
Hash 07b2d9451e0f5dabd1fefd74da31c77f
7f0c3e3b49d791af37e12747f2fd3997708483c9
a02f68ae2b98dbe1823192bdba5b364ce3dbde2fea12c537345709162ad9abe8
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 7941527663684304545
x-datadog-sampling-priority: 1
x-datadog-trace-id: 4172759481213960573
Content-Length: 78
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 01:23:43 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu127.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 955
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
bt-108394.square.site/app/website/cms/api/v1/users/146341174/customers/coordinates?cache-version=2023-11-13
199.34.228.39200 OK 70 B URL GET HTTP/1.1 bt-108394.square.site/app/website/cms/api/v1/users/146341174/customers/coordinates?cache-version=2023-11-13
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1218d87291c388b22a1b0c30a497067a
720932b2a71b024d51746ab2073b76437c91a4fe
1fc295a5c684502f7f559a15e34a6579892b20a8f999d1937c6c4fb4eedf58e5
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/cms/api/v1/users/146341174/customers/coordinates?cache-version=2023-11-13 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 5267085726249325443
x-datadog-sampling-priority: 1
x-datadog-trace-id: 7047761170720200957
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Thu, 30 Nov 2023 01:23:44 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:44 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; expires=Thu, 14-Dec-2023 01:23:44 GMT; Max-Age=1209600; path=/; samesite=lax
X-Host: grn44.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 828c82ee62c8bd996fbdaa12ef22fce0
Content-Encoding: gzip
bt-108394.square.site/square.ico
199.34.228.39200 OK 6.5 kB URL GET HTTP/1.1 bt-108394.square.site/square.ico
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /square.ico HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:44 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001a5c165-00628473f6-b9fbc77-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu84.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: fe5d7d222756465b16694b635d1a2bbd
bt-108394.square.site/uploads/b/23642310-1f09-11ee-bf17-17836fa8ff96/icon_180x180_ios_Mjc5Mj.png?width=180
199.34.228.40200 OK 314 B URL GET HTTP/1.1 bt-108394.square.site/uploads/b/23642310-1f09-11ee-bf17-17836fa8ff96/icon_180x180_ios_Mjc5Mj.png?width=180
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash f4cf23b296b8b0a5d35e93d20516a8a8
b19927d79c1a4501e9bc4763ba518b57dacd4f68
e4456ae6083f318173cec3dd9c22fdd96a90d5d331b9d63d9849b684dc3f3ab0
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /uploads/b/23642310-1f09-11ee-bf17-17836fa8ff96/icon_180x180_ios_Mjc5Mj.png?width=180 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:44 GMT
Content-Type: image/webp
Content-Length: 314
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "DN1tauN+suLA/YgjEeFQwdKKF7h71URg/NCcSKj0ly0"
Fastly-Io-Info: ifsz=603 idim=180x180 ifmt=png ofsz=314 odim=180x180 ofmt=webp
Fastly-Io-Served-By: vpop-haf2300702
Fastly-Stats: io=1
X-Amz-Request-Id: tx000004e33adea8cf09c18-00647cab2a-db1c67d-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z5ff7
X-Storage-Object: 5ff7c4c8a73c8aa0fab695299c069542a12dcbe350a824845057bb205ccfdcc7
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 1137
X-Served-By: cache-sjc1000137-SJC
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1701307424.203724,VS0,VE12
Vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu34.sf2p.intern.weebly.net
bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13
199.34.228.39200 OK 201 B URL POST HTTP/1.1 bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 5558056599617873855
x-datadog-sampling-priority: 1
x-datadog-trace-id: 6901128880404994291
Content-Length: 83
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Ik5ZYXJmUjVZdXVLZlR6SXNqNkxkT3c9PSIsInZhbHVlIjoiNUhZWDB4RktTT2J5WGNySFhlenhDRTcrY0hCTVhIbS9namRwTDUvVHNQZ1FRclJUanIwYlYwajNIQVd0NzlySVpidW1JeU5RV2ZUMi9RNmp4Ky83L0ZWcS9VYk9qSy9KYmw0SmltY1FEa3FVdjNlSGg5ZXNhSGx3QlBrYlB6Q0siLCJtYWMiOiIxNTBlZDM0MGE2ZDI4OTY0MWYxYmUzMjBiYmY4ZjhjOTZjZDIxYzNlODE4MGViMDg3ZjU3ZTdhOWUyYTA3ZDBkIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 01:23:44 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu77.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/font.css
151.101.1.46200 OK 393 B URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/font.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash a7ddbe9e253a4f3a9c6de33cf4f3ce60
121dc4d397d856ca5a65afaa1792e4c12a53132d
305ed7422238f098fb7513413aa992da0ced50741e5286ced433e30f5bf59971
GET /app/website/static/fonts/Square%20Market/font.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 393
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 17 Sep 2019 17:09:50 GMT
x-rgw-object-type: Normal
etag: W/"a7ddbe9e253a4f3a9c6de33cf4f3ce60"
x-amz-request-id: tx000001f11c4bd92d07a71-006552b132-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 439791efca0f69b4c954de25ac96651b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 91500
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.695997,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/39593.04f6f9a71587784b6cb2.js
151.101.1.46200 OK 4.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/39593.04f6f9a71587784b6cb2.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (9766)
Hash 8a1eae25da75bc5a354406a4db221549
534c601af0750423fef7a7adacb47f3544294de8
4e8ce3e90a056ce0639b46289c2bec99a57a43fa1d999a1104d52d00b6c04105
GET /app/website/js/39593.04f6f9a71587784b6cb2.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4596
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"8a1eae25da75bc5a354406a4db221549"
x-amz-request-id: tx00000c1df29c7bce68184-006553d279-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/39593.04f6f9a71587784b6cb2.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5cb69aef8532819de4da34e83139cd48e86b1121
x-request-id: 9ec52e718e4d8be2ac9216a478559fd1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 95330
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.722352,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/32949.3c0ae8d15da958c063f9.js
151.101.1.46200 OK 7.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/32949.3c0ae8d15da958c063f9.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (7938)
Hash ee37b85429054da31c9777f4017f360f
fe147de038b6d648518bf21946912e15aa93c47f
253167006ee1389bfedf76c4846fda47de12024fdddcbd293aaf4b70f4be6023
GET /app/website/js/32949.3c0ae8d15da958c063f9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7621
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:03 GMT
x-rgw-object-type: Normal
etag: W/"ee37b85429054da31c9777f4017f360f"
x-amz-request-id: tx0000017df6ad83a420638-006552c0b0-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/32949.3c0ae8d15da958c063f9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0f3804410bdf4e0d51543f59e6b14ca73e5e5c74
x-request-id: dac2c78ac39065c62580a55f7836e826
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1305512
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.726905,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/navigation-mobile.459f4aaf66988229d6c6.css
151.101.1.46200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/navigation-mobile.459f4aaf66988229d6c6.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (17880), with no line terminators
Hash 77cefc9fcde63168f3b083f78bfca75f
2adb16f2269831270244af2d4d9cb20efa740189
476056fe327bfab862d7425ecd0a07d87f6b7e3dc900cb08953929af733a34f5
GET /app/website/css/navigation-mobile.459f4aaf66988229d6c6.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4850
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:10 GMT
x-rgw-object-type: Normal
etag: W/"77cefc9fcde63168f3b083f78bfca75f"
x-amz-request-id: tx000009f69d3883bd86e04-006553d27a-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 10ee46481ff42f728f55c5d35921be7f
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307425.730426,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/navigation-mobile.87c5640c837d07a2290b.js
151.101.1.46200 OK 12 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/navigation-mobile.87c5640c837d07a2290b.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (23823)
Hash ff45aa1cbe9eca16c21704aa39d92514
4e701259dc1aab013cd0ca675842144c16d7d1a7
10c64a159f7b87c11bd10eedb9f1b5eacfd733dd19fa35e1332737b786304b0c
GET /app/website/js/navigation-mobile.87c5640c837d07a2290b.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11966
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:14 GMT
x-rgw-object-type: Normal
etag: W/"ff45aa1cbe9eca16c21704aa39d92514"
x-amz-request-id: tx0000044cf11f95a0eea26-006553d27b-db1a132-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/navigation-mobile.87c5640c837d07a2290b.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: a6908715fe4c8010872f4fc1e2a220e3
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.743565,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/36018.59579a99559c62f8cb5a.js
151.101.1.46200 OK 4.0 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/36018.59579a99559c62f8cb5a.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (15083)
Hash ce6f8764493d3b212006b012bda86288
ae79aaf9c00a942087e7b13fa6d943028c043322
8ff44338b4d802f8e4af5025c312ce4c7abb4ea60c63575c157b88c549e2026d
GET /app/website/js/36018.59579a99559c62f8cb5a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3974
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"ce6f8764493d3b212006b012bda86288"
x-amz-request-id: tx00000dbdf64575eef39d0-006553d278-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/36018.59579a99559c62f8cb5a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 62ed9ed6e9bd11b228db6f0f44732ba9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.744243,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/96166.4f5274123177ece98285.css
151.101.1.46200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/96166.4f5274123177ece98285.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (18956), with no line terminators
Hash 9178dcddb8989786967616096140810e
4f7c90b78b229c7c68cbe715475c60561c7d75d2
8d8388cf13245226fbd56d1d85917199819bd3792b5c008e8e0f92ec31f7cc0b
GET /app/website/css/96166.4f5274123177ece98285.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4871
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:08 GMT
x-rgw-object-type: Normal
etag: W/"9178dcddb8989786967616096140810e"
x-amz-request-id: tx000001b377193bd25ee59-006553d279-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: 7e79b268aabe4e8a723751ecba8e7819
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307425.746658,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/46217.715b7eb70cfa27cf8320.js
151.101.1.46200 OK 16 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/46217.715b7eb70cfa27cf8320.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (39322)
Hash cea51148d197d5dbe9300fa21d9dffe0
a970645209ce81a3557ecd0c7a4bd2c324e5dd7a
6fa44a27b28e9437c68c12962690ae84014c6692fcaf41031ab3095ce0448ebf
GET /app/website/js/46217.715b7eb70cfa27cf8320.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16191
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"cea51148d197d5dbe9300fa21d9dffe0"
x-amz-request-id: tx00000649e457e93518184-006553d282-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/46217.715b7eb70cfa27cf8320.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: 2c1cbdfe349bf1ccd9e65ee8b1d737d6
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.750379,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/25330.b21ed27ab5aba868554a.js
151.101.1.46200 OK 3.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/25330.b21ed27ab5aba868554a.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4059)
Hash e8ded0acbd0ae16ee91d37505e729612
751531ae3d5b7ee399f38926c0602968fcd9f052
f30fdd058cbf64dac48a5fb074e3b0fd44bab7b12258b179b3572dbc35c302ce
GET /app/website/js/25330.b21ed27ab5aba868554a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3641
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:03 GMT
x-rgw-object-type: Normal
etag: W/"e8ded0acbd0ae16ee91d37505e729612"
x-amz-request-id: tx00000be04b8fc58097e96-006552c0b6-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/25330.b21ed27ab5aba868554a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: 92a931b943fa939baa521d5e64a7154b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1385207
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.759022,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/18384.942bb2d52a083f46c492.js
151.101.1.46200 OK 3.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/18384.942bb2d52a083f46c492.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4135)
Hash cc245f7b85fa4dd8d40c46660ce75723
70e1a6dc2347a442f2b84940c64c459d92b35c67
e1e09f3eac9a2786911b5353b2c6c1d83697503456962208b020ae249056dcef
GET /app/website/js/18384.942bb2d52a083f46c492.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3811
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"cc245f7b85fa4dd8d40c46660ce75723"
x-amz-request-id: tx000004b8965d4a4d48100-006553d276-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/18384.942bb2d52a083f46c492.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 12ab7cc6ac2637f242c67cf8d21393d8
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.761519,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/cart-1.369c920ebe388f941b7c.css
151.101.1.46200 OK 7.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/cart-1.369c920ebe388f941b7c.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (26775), with no line terminators
Hash f50b8842395b7f21165e95993cd26a7a
3ac0983541e1dfff64bcfc93e17ca36d7da94249
422c1a935fc13540b0a3d5b05e4998d338a0bbaf566b497d70ee443348b7eb72
GET /app/website/css/cart-1.369c920ebe388f941b7c.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7232
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:08 GMT
x-rgw-object-type: Normal
etag: W/"f50b8842395b7f21165e95993cd26a7a"
x-amz-request-id: tx00000bf19953fd4c7b5b5-006553d28b-db1a051-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: eb13bb9325a1d9ee0f58c5b1d6793fec
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307425.762642,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn5.editmysite.com/app/store/api/v28/editor/users/146341174/sites/583477582236105817/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13
151.101.1.46200 OK 34 kB URL GET HTTP/2 cdn5.editmysite.com/app/store/api/v28/editor/users/146341174/sites/583477582236105817/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type JSON data\012- , ASCII text, with very long lines (13533)
Hash 133770b100f461e24af92280bbe4357c
05ce9b963b0a6ad805f7bf65e5bfb43cc8b1c26b
11b8f898ce4345cfe4bc5190c22dc0aecd6295aa91f7085f3076e4d452bd904d
GET /app/store/api/v28/editor/users/146341174/sites/583477582236105817/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13 HTTP/1.1
Host: cdn5.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json
cache-control: no-cache, private
served-via: es
fullcache: m
x-revision: f69f869310658cb6eb6a28978571e2cf1255a5e5
x-request-id: a2233d39b7bd9657816af8a52d67f170
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701307424.279899,VS0,VE247
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/81715.680c4eb9165b27b9c837.js
151.101.1.46200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/81715.680c4eb9165b27b9c837.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (10798)
Hash 0c72698eaebf8ca2ecd49972773600b0
a9065df76646e1527ba88c7d1c7242c4f9d2181d
fcef5b984b305e85248dcb0b03f4ff5063237cda183851b0c0f067ee790342aa
GET /app/website/js/81715.680c4eb9165b27b9c837.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4899
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:13 GMT
x-rgw-object-type: Normal
etag: W/"0c72698eaebf8ca2ecd49972773600b0"
x-amz-request-id: tx000006981c467670570e2-006553d279-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/81715.680c4eb9165b27b9c837.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: ced608c807c196e7b1381a76d6852d9d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.838086,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/header-4.64ce2d4b0c9650730ae3.css
151.101.1.46200 OK 6.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/header-4.64ce2d4b0c9650730ae3.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (24460), with no line terminators
Hash ed7c45d6b7782c572e4a00bfa7dafd12
7ade04a21af69a69dda0068f88150e6c349c54c2
ecf6849cbb6dda47a0511ae074c62419b6486e358b75dff3803ac63e33b0793f
GET /app/website/css/header-4.64ce2d4b0c9650730ae3.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6320
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 23:50:12 GMT
x-rgw-object-type: Normal
etag: W/"ed7c45d6b7782c572e4a00bfa7dafd12"
x-amz-request-id: tx000001f163e1bde36a9a1-0065669cbe-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 2ac420288a336db0c6e581cb20572f7b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 83811
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.842991,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/header-4.a1437cf8ca7e7da21d70.js
151.101.1.46200 OK 35 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/header-4.a1437cf8ca7e7da21d70.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12535)
Hash 50a65d45cd693c7d4998ae93c0a70535
31601bbea779f1838f10e4516ad1d76617f3798c
746c60f885572dc95f18a282504359048f3492398c2cc5363ae536730d2c84b6
GET /app/website/js/header-4.a1437cf8ca7e7da21d70.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 35404
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 19:56:37 GMT
x-rgw-object-type: Normal
etag: W/"50a65d45cd693c7d4998ae93c0a70535"
x-amz-request-id: tx0000045f9acbcfd91f401-006567980d-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/header-4.a1437cf8ca7e7da21d70.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 9dd37529274a218e9a8481b2265b7536dbf401dc
x-request-id: 76f16ba1682cf02755c5949c175d0357
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 19257
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.843667,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/87697.822e2def94e8fde84b40.js
151.101.1.46200 OK 1.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/87697.822e2def94e8fde84b40.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3987)
Hash c7728f66496429c6c25a03093f15bb23
642b0568a984397b7b633467f0ce15f2376caef5
85725f54a03ad3f84593f86a9b4db3d00f79bfb2ce928416a31ff122ec0084ec
GET /app/website/js/87697.822e2def94e8fde84b40.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1800
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:06 GMT
x-rgw-object-type: Normal
etag: W/"c7728f66496429c6c25a03093f15bb23"
x-amz-request-id: tx000007dda96763c2feb17-006552c0b0-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/87697.822e2def94e8fde84b40.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 6f70e4df766a329cdf37b110aaffd896
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 74304
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 357
x-timer: S1701307425.863086,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/80926.b1d4d7ba6efeb2909edc.js
151.101.1.46200 OK 7.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/80926.b1d4d7ba6efeb2909edc.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (10524)
Hash dd9b5d6278c227eda8be4ef64f656158
1b155df13ec7b83a1d745cfc74247a8fadd793e4
c638f91b9f2a62135979554e1aabcb42e07a76f0ba87cf44b723ef0175f2b3b7
GET /app/website/js/80926.b1d4d7ba6efeb2909edc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7937
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:13 GMT
x-rgw-object-type: Normal
etag: W/"dd9b5d6278c227eda8be4ef64f656158"
x-amz-request-id: tx000009b97179dcac518cf-006553d27b-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/80926.b1d4d7ba6efeb2909edc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 02798bbcb7cb8e850ceb8d83f8857e34
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.863699,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/97595.a9a04920ca64eed37519.css
151.101.1.46200 OK 5.0 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/97595.a9a04920ca64eed37519.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (20607), with no line terminators
Hash ea1e6b01145be0e1ae7901144f224bd5
6dc4f5be10fe22b5117af3440b649e8f2548cf9d
f66c43c2f3f48b43af4c5e0ba46b0f300be6a4a053a9e2c23f9b5948b58f87b3
GET /app/website/css/97595.a9a04920ca64eed37519.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5013
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:08 GMT
x-rgw-object-type: Normal
etag: W/"ea1e6b01145be0e1ae7901144f224bd5"
x-amz-request-id: tx000009c3ddaabd0c9a586-006553d28b-db1c67d-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 3338ca2ffb29b46c9a937062f36e2dbd
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1315221
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.865739,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/97595.840d060652ab04c40373.js
151.101.1.46200 OK 15 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/97595.840d060652ab04c40373.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (22087)
Hash 339a44e55b951a7947e6da992230424d
74ffe18b0ce1a857db054d9577c5cece24d1e154
6109da53cc82e1d7531da7f2c739a444c883a35e24ff67f3462af51ff8bc452a
GET /app/website/js/97595.840d060652ab04c40373.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 14632
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 15:11:39 GMT
x-rgw-object-type: Normal
etag: W/"339a44e55b951a7947e6da992230424d"
x-amz-request-id: tx0000050bdbc066e1106cb-0065538e97-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/97595.840d060652ab04c40373.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5f7e449f6d2e5830300e532d74694a12f7ee4814
x-request-id: 0a3dd24ad87478f4a77e6b1f38da1eca
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1332606
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.872674,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=543b1d6d-2d9c-4398-8ed3-22b6edeaf271&batch_time=1701307428682
3.233.153.127202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=543b1d6d-2d9c-4398-8ed3-22b6edeaf271&batch_time=1701307428682
IP 3.233.153.127:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 111630637d5a17a72f040926e6e2f675
e18de5d92fc557cb98bdf2db1b2f63addee50266
6a1afe9a8a7e1fac0badc0dcae6055df7fb876fe8dc320747f97022973709411
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=543b1d6d-2d9c-4398-8ed3-22b6edeaf271&batch_time=1701307428682 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15641
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
date: Thu, 30 Nov 2023 01:23:44 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/98371.767b12d429fe2258669e.js
151.101.1.46200 OK 11 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/98371.767b12d429fe2258669e.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (11038)
Hash 525bd334f7e13145b727d5971a7fd6f0
d4e03ee5a9aad5b4723e1f8056ded28b13e7bdd2
cb9e3c78d5ee85a10aecbf97c02bcb62c2194545b71a02bca0a5420de2f162ba
GET /app/website/js/98371.767b12d429fe2258669e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10905
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 16:18:35 GMT
x-rgw-object-type: Normal
etag: W/"525bd334f7e13145b727d5971a7fd6f0"
x-amz-request-id: tx00000435caefe6657db1c-0065539e45-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/98371.767b12d429fe2258669e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 44edef4d64359815dee31eaaacdcc76433d99256
x-request-id: 9b99a30c1037bf89e3588402c058a5f2
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1328440
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900353,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/20042.84d550ee5799dd28c6bb.js
151.101.1.46200 OK 10 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/20042.84d550ee5799dd28c6bb.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (14285)
Hash c0b3cf9e51ad5dc7eb5ef5a28f92925a
f8a4459d19fe5f19f20e92e71f66ef09fce829ff
5177d25fcb95ba1ce1fc37870d46836c7bf678589035fd23091341328e66bbc7
GET /app/website/js/20042.84d550ee5799dd28c6bb.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10458
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"c0b3cf9e51ad5dc7eb5ef5a28f92925a"
x-amz-request-id: tx00000065b93e7b3287f96-006553d27d-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/20042.84d550ee5799dd28c6bb.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: ce7edf91351ddfa06c0de96f3795f5f7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 77165
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900369,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/15889.ba25152ac864744b7d41.js
151.101.1.46200 OK 4.1 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/15889.ba25152ac864744b7d41.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4957)
Hash 606372c9efe78c625b0eadc6e0b91129
1e57bed129750df6ae86bf426dcdb5ad88fcafcf
52a48cbb41e9a7310f07257a5740f3cfcfd88a9006e3dbaf80e60d9590bb3d5a
GET /app/website/js/15889.ba25152ac864744b7d41.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4081
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 15:11:39 GMT
x-rgw-object-type: Normal
etag: W/"606372c9efe78c625b0eadc6e0b91129"
x-amz-request-id: tx0000065c9c6ddad18852d-0065538ea0-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/15889.ba25152ac864744b7d41.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5f7e449f6d2e5830300e532d74694a12f7ee4814
x-request-id: 11b522db946a0049de0b5a654e051761
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1332473
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900409,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/contact-us-1.e733c9fefe01d752c319.js
151.101.1.46200 OK 782 B URL GET HTTP/3 cdn3.editmysite.com/app/website/js/contact-us-1.e733c9fefe01d752c319.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (1598)
Hash 5eedcf634746579b8706df7b1d45b239
9b08ad78615dc35c0dc6a1a8f8597634233efe27
46f5c135669438dcc1e89f1190ba533e22938252285af2c6d1916a77e5891eeb
GET /app/website/js/contact-us-1.e733c9fefe01d752c319.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 782
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:09 GMT
x-rgw-object-type: Normal
etag: W/"5eedcf634746579b8706df7b1d45b239"
x-amz-request-id: tx00000e926541982211d28-006552c0c4-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/contact-us-1.e733c9fefe01d752c319.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: b66c53b9773369f06cfe15f65cd7383a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1385207
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900390,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/footer-7.1cda04154999b30d0f91.css
151.101.1.46200 OK 2.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/footer-7.1cda04154999b30d0f91.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (8235), with no line terminators
Hash 11a5cacf33d07cfca7e1283571c246e7
471d498f76d0ff2daac1041c20990faa43b3ec80
f95e014921f5c0f16c06ba3265f0adb28a26d2ae5f62138b41bf69448b2d2446
GET /app/website/css/footer-7.1cda04154999b30d0f91.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2284
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 16:18:34 GMT
x-rgw-object-type: Normal
etag: W/"11a5cacf33d07cfca7e1283571c246e7"
x-amz-request-id: tx00000380b75839072ff4b-006566b6b3-e4e0628-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: d2e631d045dcb7c0f678016e3a2f34a9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 77165
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900523,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/contact-us-1.4b1c5a6302226c133a56.css
151.101.1.46200 OK 267 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/contact-us-1.4b1c5a6302226c133a56.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (579), with no line terminators
Hash 6dd8d151bbb7c0227696fd5a6e54b3d9
a19e52e010a3e3a22e953304d07a65214ee6475a
c5d39f5dd6fcae9fc1a0302cae2d91f0c88022d027d85c6bdf044c0de0482ba8
GET /app/website/css/contact-us-1.4b1c5a6302226c133a56.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 267
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:32:57 GMT
x-rgw-object-type: Normal
etag: W/"6dd8d151bbb7c0227696fd5a6e54b3d9"
x-amz-request-id: tx00000eaf8eb9fcc8a7dc2-006552c0c0-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 911b2149809046e22d93d4f3e40e0f1efb188028
x-request-id: 901c70a452a0e63f970cea67d401f519
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 3380
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900396,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/footer-7.b5b333de64ecdb6ddfd9.js
151.101.1.46200 OK 1.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/footer-7.b5b333de64ecdb6ddfd9.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4855)
Hash 601649aea11481ac66e0a294311cc3d1
116f807e6f73e31af58122904433dec03b343bfb
dc479d2e6e37d599f9dd0dbced672a951bde0f8ae95e9b05829371cde2fb89f3
GET /app/website/js/footer-7.b5b333de64ecdb6ddfd9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1296
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 16:18:35 GMT
x-rgw-object-type: Normal
etag: W/"601649aea11481ac66e0a294311cc3d1"
x-amz-request-id: tx00000655b8e4ca649f7d2-0065539e4b-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/footer-7.b5b333de64ecdb6ddfd9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 88919f7159c082887e2be74293a69530
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 90628
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.900710,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
151.101.1.46200 OK 41 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 41400, version 1.0\012- data
Hash ade801c572e692ed6abe4213896eccc8
82a61609a657857d3a2b2a4e12d7db9546221f22
f321df4af5ea5d9ad9d0840c3f6b332567584620efedd1fade186123abc7479e
GET /app/website/static/fonts/Square%20Market/sqmarket-medium.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41400
server: nginx
content-type: font/woff
last-modified: Tue, 15 Sep 2020 17:37:49 GMT
x-rgw-object-type: Normal
etag: "ade801c572e692ed6abe4213896eccc8"
x-amz-request-id: tx00000315f6fbb1bc3b2fe-00654b3b50-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 7124b4dadfde01daf9340bde27ef95d505977a12
x-request-id: 34daeca5a3163af5147eb7729a7a35a5
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1626434
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.901266,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-regular.woff
151.101.1.46200 OK 39 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-regular.woff
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 39020, version 1.0\012- data
Hash 6d82eada1d3af65a01d7a535b15ed1cc
b473e899cde33d7f903c754729ee41b46229a1e7
5e094fc97ee2575583299cc73a332e742c43a80e5fefeb3579fe3c5108c535f7
GET /app/website/static/fonts/Square%20Market/sqmarket-regular.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39020
server: nginx
content-type: font/woff
last-modified: Mon, 16 Sep 2019 15:04:20 GMT
x-rgw-object-type: Normal
etag: "6d82eada1d3af65a01d7a535b15ed1cc"
x-amz-request-id: tx000001f6e30c978d198a2-006549773d-db1a132-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f5c020bdb7a5a3708de26c321ae9f5c735ca5e31
x-request-id: 60d2bd118731c9808c2ba6b7b7453a52
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1993955
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.910185,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
151.101.1.46200 OK 41 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 41400, version 1.0\012- data
Hash ade801c572e692ed6abe4213896eccc8
82a61609a657857d3a2b2a4e12d7db9546221f22
f321df4af5ea5d9ad9d0840c3f6b332567584620efedd1fade186123abc7479e
GET /app/website/static/fonts/Square%20Market/sqmarket-medium.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41400
server: nginx
content-type: font/woff
last-modified: Tue, 15 Sep 2020 17:37:49 GMT
x-rgw-object-type: Normal
etag: "ade801c572e692ed6abe4213896eccc8"
x-amz-request-id: tx00000315f6fbb1bc3b2fe-00654b3b50-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 7124b4dadfde01daf9340bde27ef95d505977a12
x-request-id: 34daeca5a3163af5147eb7729a7a35a5
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 1626434
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701307425.912232,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
151.101.1.46200 OK 351 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (626), with no line terminators
Hash 607e0fd2b514ffdc06c62b1eb1bc428b
9813c79ecc25a39fb2001780bd2a89a41f589be0
0e4c81150634a1580473d241b3d8d425776793cd1c3931c1d879065f63b88c8f
GET /app/website/css/free-footer.86d148e5cb2be7f08d49.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 351
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 14 Jul 2022 19:54:09 GMT
x-rgw-object-type: Normal
etag: W/"607e0fd2b514ffdc06c62b1eb1bc428b"
x-amz-request-id: tx000001461cf2b71497ba1-006552c32e-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 984bd5ebcd9b57e87726ca3d0a603cd8b77f2430
x-request-id: 529e2f725de1755faa00862e5a18bfc1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:45 GMT
via: 1.1 varnish
age: 1298367
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.066888,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/free-footer.80be4e0cd1ba575c27fd.js
151.101.1.46200 OK 3.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/free-footer.80be4e0cd1ba575c27fd.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (6763)
Hash e9961659980d2cf6b67a9751019dc2a2
18ea725af3bc6ae8f84c8dc413dbcb4bd35a72fc
c1b1ecb3ed335f08e705a3ff3f6e4273f62db39ba206388115c20855514ef517
GET /app/website/js/free-footer.80be4e0cd1ba575c27fd.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3195
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 15:11:40 GMT
x-rgw-object-type: Normal
etag: W/"e9961659980d2cf6b67a9751019dc2a2"
x-amz-request-id: tx0000087b9b2aac21d3b8b-0065538e97-db1a051-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/free-footer.80be4e0cd1ba575c27fd.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 984bd5ebcd9b57e87726ca3d0a603cd8b77f2430
x-request-id: d9b462003e08e269bd6672c1626d085e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:45 GMT
via: 1.1 varnish
age: 1298367
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.066876,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
bt-108394.square.site/app/website/static/icons/sets/square/close.svg
199.34.228.40200 OK 235 B URL GET HTTP/1.1 bt-108394.square.site/app/website/static/icons/sets/square/close.svg
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 1daa79e586c0c88959a8a47ec95688f5
2b5ddd4643f39e9bf8406fa7dd34be3694f887e4
9eccb2c7213a769a9c16859126e2227afc4b88bce8e538e4b70feeb9c009cece
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/static/icons/sets/square/close.svg HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 53678879873817426
x-datadog-sampling-priority: 1
x-datadog-trace-id: 6954671779194662591
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:45 GMT
Content-Type: image/svg+xml
Content-Length: 235
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "1daa79e586c0c88959a8a47ec95688f5"
x-amz-request-id: tx0000033ef99db9efe8484-0064386db9-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu46.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 1932cf36df6063c507a56df708269fdc
bt-108394.square.site/app/website/static/icons/sets/square/spinner.svg
199.34.228.39200 OK 205 B URL GET HTTP/1.1 bt-108394.square.site/app/website/static/icons/sets/square/spinner.svg
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash b7b85a7b3f5575bcae909da71b04d588
86442aaf9a428a95cd7b00bd52c875618c4f9cdc
a6f7da657d6f069d0ee93cabff70a26c73d180090ba83df879aed55944a92066
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/static/icons/sets/square/spinner.svg HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 9089947833363112006
x-datadog-sampling-priority: 1
x-datadog-trace-id: 2507938461682058039
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:45 GMT
Content-Type: image/svg+xml
Content-Length: 205
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "b7b85a7b3f5575bcae909da71b04d588"
x-amz-request-id: tx0000006863c8813c75fa7-0064386db9-d955bdc-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu84.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 2891f70166f0d27b321fb203dc92304e
bt-108394.square.site/app/website/static/icons/sets/square/close.svg
199.34.228.39200 OK 235 B URL GET HTTP/1.1 bt-108394.square.site/app/website/static/icons/sets/square/close.svg
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 1daa79e586c0c88959a8a47ec95688f5
2b5ddd4643f39e9bf8406fa7dd34be3694f887e4
9eccb2c7213a769a9c16859126e2227afc4b88bce8e538e4b70feeb9c009cece
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/static/icons/sets/square/close.svg HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 4902137036107148134
x-datadog-sampling-priority: 1
x-datadog-trace-id: 2079880705600300322
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:45 GMT
Content-Type: image/svg+xml
Content-Length: 235
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "1daa79e586c0c88959a8a47ec95688f5"
x-amz-request-id: tx0000033ef99db9efe8484-0064386db9-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu138.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: ff5d67f2a51d2bf603fdf984b727c528
bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13
199.34.228.39200 OK 182 B URL POST HTTP/1.1 bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 816243932769252254
x-datadog-sampling-priority: 1
x-datadog-trace-id: 414320431085897054
Content-Length: 89
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 01:23:45 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu62.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
cf9fa57b568adbb534ac.cdn6.editmysite.com/uploads/b/cf9fa57b568adbb534ac92191b2d7d6ef46ffb64c2026322a922f75e44edb9b4/BT%20PAGE_1688983692.PNG?width=400&optimize=medium
151.101.1.46200 OK 9.2 kB URL GET HTTP/3 cf9fa57b568adbb534ac.cdn6.editmysite.com/uploads/b/cf9fa57b568adbb534ac92191b2d7d6ef46ffb64c2026322a922f75e44edb9b4/BT%20PAGE_1688983692.PNG?width=400&optimize=medium
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 78ed7401c1176d974d954b93e31f08bc
e4b4e461bfccde5f77c908858d17199bf03738a5
e8c8eb04011c6603ffc6583d4dd0b1349d28c052469e151d0b2233b5dd947d70
GET /uploads/b/cf9fa57b568adbb534ac92191b2d7d6ef46ffb64c2026322a922f75e44edb9b4/BT%20PAGE_1688983692.PNG?width=400&optimize=medium HTTP/1.1
Host: cf9fa57b568adbb534ac.cdn6.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9248
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
access-control-allow-origin: *
content-type: image/webp
etag: "qdA7ByHttJrdhiuqhoWWxQCWAdlZ8uQOvs8sYMp1NoQ"
fastly-io-info: ifsz=13109 idim=158x158 ifmt=png ofsz=9248 odim=158x158 ofmt=webp
fastly-io-served-by: vpop-haf2300701
fastly-stats: io=1
server: nginx
x-amz-request-id: tx000002f16c567c399ba03-0064a2dc68-db1c67d-sfo1
x-rgw-object-type: Normal
x-storage-bucket: z8753
x-storage-object: 8753471b8992a414d0d9a878721a259e5559342da6dc57f14b82a512e8583efb
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:45 GMT
age: 0
x-served-by: cache-sjc10059-SJC, cache-bma1680-BMA
x-cache: HIT, MISS
x-cache-hits: 5, 0
x-timer: S1701307425.161889,VS0,VE162
vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=97e4b38d-9e42-40a5-b257-0f49cc86fad9&batch_time=1701307429459
3.233.153.127202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=97e4b38d-9e42-40a5-b257-0f49cc86fad9&batch_time=1701307429459
IP 3.233.153.127:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b7dc0d56f0c5fcea4ef0fa19ba9e12f1
a43f248c5b6554ed259bc5a65f0c731fff2f6803
7eef0d2e1c4382dcaeda74a42cfadf5c955e88fb7ca8c81ac97171d40114f829
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=97e4b38d-9e42-40a5-b257-0f49cc86fad9&batch_time=1701307429459 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15720
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
date: Thu, 30 Nov 2023 01:23:45 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
bt-108394.square.site/app/website/static/icons/sets/square/menu.svg
199.34.228.39200 OK 196 B URL GET HTTP/1.1 bt-108394.square.site/app/website/static/icons/sets/square/menu.svg
IP 199.34.228.39:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7eb63f2ff64f726044a6ce8cf9627dd7
0d40a515691bbceb67e0a444725a1a4f6a425500
acf5d79bfca5ac8a248a9e21f7caeff9be8161fe912f2df3dd894f719acd646d
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/static/icons/sets/square/menu.svg HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bt-108394.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 3718777074468715261
x-datadog-sampling-priority: 1
x-datadog-trace-id: 1581212741009493596
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:45 GMT
Content-Type: image/svg+xml
Content-Length: 196
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "7eb63f2ff64f726044a6ce8cf9627dd7"
x-amz-request-id: tx000005c3cf5855b43ae4c-0064386dba-d95593e-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu84.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: c7d3f1b95410f852dcb5008aeb3db969
bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13
199.34.228.40200 OK 79 B URL POST HTTP/1.1 bt-108394.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13 HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 2888946118360209505
x-datadog-sampling-priority: 1
x-datadog-trace-id: 1117972391973942370
Content-Length: 77
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 01:23:45 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn153.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
bt-108394.square.site/app/website/square.ico
199.34.228.40200 OK 6.5 kB URL GET HTTP/1.1 bt-108394.square.site/app/website/square.ico
IP 199.34.228.40:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert OpenPhish phishing BT Group plc
PhishTank phishing Other
GET /app/website/square.ico HTTP/1.1
Host: bt-108394.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6IkZybDhPUjFDVUtIUyt6dGgzVlFvMXc9PSIsInZhbHVlIjoiUTRGd0ZZcFF6eC9WKzRaaTlBcFFteU85QTBQRWJZY2p2YUxTWFNLbTF5b2xva0dPS0l1ZDE3cXgrTHdXWkl5V0MrRlg3RU9iaHhHQVE0T1hoSTFvMEc1WGRkcW1HNjJEWmVib0lsTG9PdzE5VWZRbDUyU3dsQTRvdTRiVHdmZjYiLCJtYWMiOiI0ZDU3OTU0YTUzZjkwMGJhYjA0MjQ0NjA3ZTU1MTMxOGU3MTQ3MDgwMzQ4NGFiNTQ4MDNhODc2YTVmMWM4YWZjIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjFsRGJ0RjVaLzROU2h0N3l4cExWakE9PSIsInZhbHVlIjoiOXlRVGxUTGpyOEcvRm5QNm5lN1J2TUNXaHFVTHgvUnkrZlNTSXB1NGJINnBWR0cvOVVvRjBDdHF3dmREazZ4ZmFaTThqZGx4TlVaakF4aGZHZHFmc1k5c2dWZDJzR3lkNTZvTnppR09EWTJLa1dIMmlSaVk4dzNObzQ1c1piTDMiLCJtYWMiOiJmNzc2MzE4MDUyOThhZjFjMzBhZmQ5YTgwNTFkNWY0MDcxNzRmNDllZTBiZGQwYzA3YzUxMmI2OWZhNDVjOWI2IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijd1dDFrSkxZdWlzVTNwNmg3TXVROGc9PSIsInZhbHVlIjoiZnlyeGFEREFCUllVWnI0TkNUd0FGeThrSUdYTmNLMlpsM1lORXVkNHRVQ1VvY3krQU9kSlkyeU9WVnNNZS9JTFhnU1YwcXpNVlpoNkE1RThuY2lXNG9aZEJQbmk5bU5nbWxoY2JHNWE3bkxKN3FiWFJScWpqOUhqcHdMTWRIZW4iLCJtYWMiOiI1MGQ5ODc0ZjA0MjA5YWNlZDkyYTQ1NzI3ZWFlNzYzY2E3NTg2NjBmZWI4ZmIzOGI4NmQ2ZDk0MGVmMjEzOTFiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=c884e2ab-a279-49cf-9d84-21111f31b90f&created=1701307427690&expire=1701308327690; websitespring-xsrf=eyJpdiI6ImVkRzRtOTFsU2NaOWk3S05YRUNoaXc9PSIsInZhbHVlIjoiQi9YaWxDdHU3dzczL1RiTzI1ekt1c2p3VnQ5d25LeGoyMStwRzdWWTV6Vk44VE5zSmUxMlpxcVUwZU01V3NPZ3FETFJpQlVXS0M2WWRlUWRkSGpxUE9tZk1lYzJzK1JTZFFIK0lGT21rTjBsNWE4NnBzZ0RFNUt6dEUvUUNOcWYiLCJtYWMiOiJjZjViZmE5ZGViNTM3NDVjNGUwNDk3NjNkOGY1MGQyZjJlNmVhMjEzMjY3OWE2ODMxZDgwNWMyMTZiMTU3NGNmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 01:23:45 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001aa728b-00628473fa-b9fbc7f-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn149.sf2p.intern.weebly.net
X-Revision: 6aa6ea047203d044e400b65df21241cedf90d222
X-Request-ID: 1dd5801e7b992e19bd554472de579869
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=084fddba-0c61-43d4-93da-74762762b589&batch_time=1701307430702
3.233.153.127202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=084fddba-0c61-43d4-93da-74762762b589&batch_time=1701307430702
IP 3.233.153.127:443
Requested by https://bt-108394.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8e471d3dac46be6a51175873555e5d63
9876d1a55c01a34588cdee003c103e9a8906ce72
06341ce1b5326af569eb3ace198d6d38ea092a057cbc5677c86b6229a8a1e45b
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-6aa6ea0&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=084fddba-0c61-43d4-93da-74762762b589&batch_time=1701307430702 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16029
Origin: https://bt-108394.square.site
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
date: Thu, 30 Nov 2023 01:23:46 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/cart-1.5058b40814598c81f5b3.js
151.101.1.46200 OK 104 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/cart-1.5058b40814598c81f5b3.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (9644)
Size 104 kB (104037 bytes)
Hash 08d4725d817d3c78c1e328333b8acef5
90a2b5f888a673d0f8bdbf39b343cf27f237d6a0
08a7e2c7f9c330093e177b8a1ecab3e27a15a2a49218241d6251f2ab87592a66
GET /app/website/js/cart-1.5058b40814598c81f5b3.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 33048
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 19:56:37 GMT
x-rgw-object-type: Normal
etag: W/"08d4725d817d3c78c1e328333b8acef5"
x-amz-request-id: tx00000fa3952bd29ecb614-0065679811-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/cart-1.5058b40814598c81f5b3.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 911b2149809046e22d93d4f3e40e0f1efb188028
x-request-id: 53999d037ad212b4879cac2f527d4f4f
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:44 GMT
via: 1.1 varnish
age: 6860
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307425.779500,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/languages/en.77a55325d750cd313bd4.js
151.101.1.46200 OK 1.2 MB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.77a55325d750cd313bd4.js
IP 151.101.1.46:443
Requested by https://bt-108394.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Size 1.2 MB (1171976 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/website/js/languages/en.77a55325d750cd313bd4.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bt-108394.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 19:56:38 GMT
x-rgw-object-type: Normal
etag: W/"173646feccf5565a739c90be31f63582"
x-amz-request-id: tx00000f4e4923640e7f496-0065679807-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.77a55325d750cd313bd4.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 9dd37529274a218e9a8481b2265b7536dbf401dc
x-request-id: 693d8268ae04ee4d01840e0e472f44bc
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Thu, 30 Nov 2023 01:23:42 GMT
via: 1.1 varnish
age: 19455
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701307422.300786,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 317336
X-Firefox-Spdy: h2