r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7008
Expires: Sun, 27 Nov 2022 20:06:38 GMT
Date: Sun, 27 Nov 2022 18:09:50 GMT
Connection: keep-alive
att-100783.square.site/
302 Found 366 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e0af5d2de82ae77170a189fcf07aaf19
1e3abbc872544abc3fac7a554c8ea95d0dd6ab60
b10eff5e0ba955cce0a6e9d4e8d29740fb9a6d371ab1973d85c436a77129ffc2
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET / HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Sun, 27 Nov 2022 18:09:50 GMT
Location: https://att-100783.square.site
Set-Cookie: publishedsite-xsrf=eyJpdiI6IlZaUlhcL3pta0R3RERzdk54QmNyVlBBPT0iLCJ2YWx1ZSI6IkxVZzhWTzluR002N3prdWRSUE5LY2pPNDJTK20xTmZIZkxoYUlhWTJ6Wmw0S2hqdU93Mk5JN3hGbW1KZGMxUkphcnduN1c1TDhDU2s4UmtqWDNmWmxLNFg2bFEzTnZNTVFcLzJTY09JMmVOdGQ2ZERhZHYzSW1nSHVocUlqZDlPVyIsIm1hYyI6Ijk2MDQ5ZWMwY2UxNGE0NjJlZjlhOWM2ZTViOTZjZjkwYWU2OWU1NmEzNjNkMTI5NTNmYThkYzdhNzAwNjAwNzcifQ%3D%3D; expires=Sun, 11-Dec-2022 18:09:50 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Ik9TY1BjK0Q5MGV1Y0tRV0VRMDBhN0E9PSIsInZhbHVlIjoiVk9LclRXZkpBK1gycUhnMVg4dCtESEcrMXczZ2I5VFM1WjZEbENhK2ZrVGUxM0FcL0RkSDZHTTd3K3dmdlRYVTBPaXJHaEcrSEs5QkJBWG45Sm9zMlo2akFzYmR6SEZ4MUNjSlRGZXcyeTRJRkE5OURxejRNNFp1T1l0cXlRRnBMIiwibWFjIjoiNmFmNmNlNTUyYjY2NDJhM2JjOWY0N2U1MGM5Y2Y3NWNhY2M1NWZjNDQ4YmJjNGQ1ZmEzYzdlYTdjMzg4ZmY5MiJ9; expires=Sun, 11-Dec-2022 18:09:50 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6ImJ4eHhGK0FLY1ZPTjR0bWlMOU1jd0E9PSIsInZhbHVlIjoiMDlCMkp3NG9TaTVPU0VtS2pYeG5KclFNOVpGTktjRFFLbnVNbGJkazNabDJIOTFJYTltdVpoeHYxWXVGN2QxMFh3SWJOdmNObnFPRmU5NkFWVFVhRXlGQVlLcENQaUxcL3htZjZEWEswNFU3K0lzSWJcLzFKM2d2UTBFS3ZlbHRZUiIsIm1hYyI6IjE2YTllMGEzOTA0MWJjYTRiYjk4ODRiNTAxOGUwN2U5ZGVjODg1NTViY2U5ZTE0MDMzMTgwMmU2NDZlYTZlMWEifQ%3D%3D; expires=Sun, 11-Dec-2022 18:09:50 GMT; Max-Age=1209600; path=/; httponly
X-Host: blu84.sf2p.intern.weebly.net
X-Revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
X-Request-ID: e09897216a95040878387601e82af023
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12625
Expires: Sun, 27 Nov 2022 21:40:15 GMT
Date: Sun, 27 Nov 2022 18:09:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4452
Cache-Control: max-age=149735
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 18:09:50 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:45:25 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nMioK9S/kBRbh83RJYSdht4DRcY1iKQRUnS9VNehTWl6j20eyiKPMaHWY7jUayBciQKppZwxExU=
x-amz-request-id: QTG020B0RBPSXES8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 17:41:43 GMT
age: 1687
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 17:19:23 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3027
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 18:09:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 18:08:54 GMT
cache-control: public,max-age=3600
age: 56
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 2b1601e4bd7ad8bb42b967f9a03ffcf3
078606a73e70756d3a62e693e43e170f0e0b5787
ba9d0cbfa8d89b21f0ee69e948ebfd48c42625808725ef76472d694f9235c0d4
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "BA9D0CBFA8D89B21F0EE69E948EBFD48C42625808725EF76472D694F9235C0D4"
Last-Modified: Sun, 27 Nov 2022 10:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3384
Expires: Sun, 27 Nov 2022 19:06:15 GMT
Date: Sun, 27 Nov 2022 18:09:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2317
Cache-Control: max-age=142538
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 18:09:51 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:45:29 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: txij5c/edxzNso1JRj52Nw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K7skV2JE0n/rVn2fK+XzftROpI4=
att-100783.square.site/
200 OK 9.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (20071)
Hash a88b9a69c19da13b9ddb1872421488eb
b4c6df0fbbe5f4661f4de61867065d623105af96
4be38c64e7738520d3434db2feb3cdb38b490af078557bf69ab292d4afbfdc58
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET / HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Sun, 27 Nov 2022 18:09:51 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; expires=Sun, 11-Dec-2022 18:09:51 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; expires=Sun, 11-Dec-2022 18:09:51 GMT; Max-Age=1209600; path=/
PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; expires=Sun, 11-Dec-2022 18:09:51 GMT; Max-Age=1209600; path=/; httponly
X-Host: grn39.sf2p.intern.weebly.net
X-Revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
X-Request-ID: 8585902c7593d6ee9a96b47ee7a75016
Content-Encoding: gzip
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 18:03:15 GMT
etag: "637e6063-124fe"
expires: Thu, 08 Dec 2022 08:38:41 GMT
cache-control: max-age=1209600
x-host: grn145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
age: 293470
x-served-by: cache-sjc10061-SJC, cache-bma1632-BMA
x-cache: HIT, HIT
x-cache-hits: 36, 3070
x-timer: S1669572592.832784,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.1212ec71ad4b7ff5f443.css
200 OK 24 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/site.1212ec71ad4b7ff5f443.css
IP
File type Unicode text, UTF-8 text, with very long lines (64930), with no line terminators
Hash 95f18bd4635781a99daed1dd3de8adc1
ac08c18cc726deed47eb6b8f68ec3b5239a2fd91
ef25fa02ff6fba3fa3c90616e1ddbea7d9695867b40a81889074051552b7fff5
GET /app/website/css/site.1212ec71ad4b7ff5f443.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:11 GMT
x-rgw-object-type: Normal
etag: W/"c22f38a806467cd0cdff32ec647019f0"
x-amz-request-id: tx00000000000002d07c203-00636c1aa2-c67eadd-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 64414abb58e4acfdd0b6e55daa9d9489195edb4b
x-request-id: 463ecf92fd5e50a7617749451e59789e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 1106749
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 7
x-timer: S1669572592.836153,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23817
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.577957259b9178e25575.css
200 OK 23 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.577957259b9178e25575.css
IP
File type Unicode text, UTF-8 text, with very long lines (64270), with no line terminators
Hash d4a7cac8be5683713ff6e8d0784011f2
e2a97aa958426f4a35d0428ba833ced0c6cc6042
286ee096d03d0f9e94833359780ff046c322ba1ea9be4a432a1ae6a89970ecb5
GET /app/checkout/assets/checkout/css/wcko.577957259b9178e25575.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:41:51 GMT
x-rgw-object-type: Normal
etag: W/"2a31fcbf4eb69762b720ec1ef08544e0"
x-amz-request-id: tx00000000000002d0bf7b3-00636c1f88-c67eadd-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 1542207
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 8
x-timer: S1669572592.836882,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22873
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.804692d3761600aae434.js
200 OK 25 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/runtime.804692d3761600aae434.js
IP
File type ASCII text, with very long lines (50950)
Hash 3b60093f03d45e216f18b8d318e7d871
a6ce580f9ba25ef9188a8b88442da334336f27d7
179c3ed055b4d6728fcbb6d9ec17527d89711987880c89b1b34492b5d9c5034e
GET /app/website/js/runtime.804692d3761600aae434.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 22 Nov 2022 21:36:59 GMT
x-rgw-object-type: Normal
etag: W/"80770f38983ca9114298689b2f771c1b"
x-amz-request-id: tx000000000000036fcbdf8-00637d4153-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.804692d3761600aae434.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
x-request-id: de66cf5ce4d828ffa86ec169d38f2186
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 419354
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 8
x-timer: S1669572592.841831,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24966
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
IP
File type ASCII text, with very long lines (11882), with no line terminators
Hash 20a4e66f534b80396d40bbc4291b2172
d7c962996f2715d94483be2bf9b644c7185d7ec7
0f19e8ad1c9bd5ae2ae5141f31b4e491bb460558da0ac51cd402964e716880ac
GET /app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Mar 2022 18:09:33 GMT
x-rgw-object-type: Normal
etag: W/"40372ca3b0cfa19f4e5d664243108364"
x-amz-request-id: tx00000000000005ce1aaac-0062434bb9-a9f1ce7-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 1097330
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 7
x-timer: S1669572592.842944,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4998
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash fd36d1886950c10411970802a743a83e
a554c4e0ae350b37d43d4056f75385d0f13e4951
ebd28a800fd72e277359b9115a1e27edd3ae255d947a01b1fada178d0e8fdd80
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D09CF01F8D3E4B4C39EB75B9AD684571BEAAD3D9"
Expires: Mon, 28 Nov 2022 05:00:00 GMT
Last-Modified: Sun, 27 Nov 2022 17:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 340
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770cd13b4c77b4e8-OSL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash fd36d1886950c10411970802a743a83e
a554c4e0ae350b37d43d4056f75385d0f13e4951
ebd28a800fd72e277359b9115a1e27edd3ae255d947a01b1fada178d0e8fdd80
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D09CF01F8D3E4B4C39EB75B9AD684571BEAAD3D9"
Expires: Mon, 28 Nov 2022 05:00:00 GMT
Last-Modified: Sun, 27 Nov 2022 17:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 340
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770cd13b4f12b4ee-OSL
cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
200 OK 72 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.9bc3531c7b14b533b653.js
IP
File type Unicode text, UTF-8 text, with very long lines (27432)
Hash f4b29141d74cfc31ae87b2379bf827c6
d3cecf2609cbc423e0a59e9cad96c96595fc550c
77ba93a6fbe46719dede0298898f4d896c073a42d0c093179615edf38f1fd0e5
GET /app/website/js/vue-modules.9bc3531c7b14b533b653.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:22 GMT
x-rgw-object-type: Normal
etag: W/"be42f69ec175a01b6e195526f58dae71"
x-amz-request-id: tx00000000000002109ab7c-006356f891-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.9bc3531c7b14b533b653.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1d15aad34e0d20a973977ec67b3bf5090814a6cf
x-request-id: f2d07942d6e3e48efaf38632576a5abf
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 2129462
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 8
x-timer: S1669572592.844108,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72192
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/site.8f328ad98fec9cda5623.js
200 OK 624 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/site.8f328ad98fec9cda5623.js
IP
File type ASCII text, with very long lines (50430)
Size 624 kB (623975 bytes)
Hash 535be035beccab2e29f494729228dc4b
d60eb0034b5f3a2b4a005070bee9507a5ee14746
541c8ccb46b1adbecbe40ddf1d075ba17b530a233a8cfd5413c3da9a2c8bc73e
GET /app/website/js/site.8f328ad98fec9cda5623.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 22 Nov 2022 21:36:59 GMT
x-rgw-object-type: Normal
etag: W/"359b11869f7a104316adf383efc5bdee"
x-amz-request-id: tx0000000000000384172d7-00637d4150-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.8f328ad98fec9cda5623.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
x-request-id: bf29b9340fd9be23a5d7dec7795fbd26
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 419355
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572592.847039,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 623975
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 55db134ccf69f19e5e47d0f5928b1ec0
2842af28b529a888b2ecf320276d36b45d2beac8
6a6d105bb385d753e9bcb6db819e1faef1d58ce7a1794e2374453bc0ae86bbb0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91028
Date: Sun, 27 Nov 2022 18:09:52 GMT
Etag: "63825023-1d7"
Expires: Mon, 28 Nov 2022 19:27:00 GMT
Last-Modified: Sat, 26 Nov 2022 17:42:59 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uMhiAL2hSYesw0CtLE19jEsaJ4pFeb0FwGpRHhSr1gUna5J_mgGx2Q==
Age: 6241
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 55db134ccf69f19e5e47d0f5928b1ec0
2842af28b529a888b2ecf320276d36b45d2beac8
6a6d105bb385d753e9bcb6db819e1faef1d58ce7a1794e2374453bc0ae86bbb0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87390
Date: Sun, 27 Nov 2022 18:09:52 GMT
Etag: "63825023-1d7"
Expires: Mon, 28 Nov 2022 18:26:22 GMT
Last-Modified: Sat, 26 Nov 2022 17:42:59 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lNJe38GFhAZMAmT2y-jVLBF9F1A3UBhl8A8jRK6AMRt9Y5xBIB-iXQ==
Age: 2603
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://att-100783.square.site/
Origin: https://att-100783.square.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 18:09:52 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://att-100783.square.site
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10041
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 18:09:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10041
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 18:09:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10041
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 18:09:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 20:58:18 GMT
age: 76294
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 73184
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I6egDH0h7D08HhaoQHQ0vgghBhPfje2lGIbnWD-t7p4txzHsFxmZfg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 16:15:23 GMT
age: 6869
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 73095
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 73091
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 58984
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1988
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 18:09:52 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Mon, 27 Nov 2023 18:09:52 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://att-100783.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 894 B URL HTTP/1.1 att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with very long lines (894), with no line terminators
Hash 03c94b8fdf7c0cfe24e1abcf53bcc4e6
c009486c9200ad6714d39784d3cf8156b53c88a1
ea060bdc4414e877c4192be393464d0cf268c175d021d10ddb12762e594f6571
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0=
Content-Length: 78
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572592.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:52 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu137.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 894
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://att-100783.square.site/
Content-Type: text/plain;charset=UTF-8
Origin: https://att-100783.square.site
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 18:09:52 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://att-100783.square.site
access-control-expose-headers: x-sentry-error, retry-after, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
att-100783.square.site/app/website/cms/api/v1/users/143982790/customers/coordinates
200 OK 70 B URL HTTP/1.1 att-100783.square.site/app/website/cms/api/v1/users/143982790/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9752b06c768724a72741cf9388713596
3c05993fc47e53d1edaa9c03779565a7753f3a61
1d97b677c782c9ae57c8b4dcb6afd88a8068ea3cd133a00cf1050dfe0b4d835c
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET /app/website/cms/api/v1/users/143982790/customers/coordinates HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0=
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572592.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Sun, 27 Nov 2022 18:09:53 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6Ind2YklsaklxUHFJWGpuQzdFRVwvdmR3PT0iLCJ2YWx1ZSI6ImNkZzlneWFQeVowQm95ajJyVTljeXJIeXdFSVwvMFp4bGlnbllZVFwvYmU5Z043aGhPOVNIT3FxVEtEWldjK0NpR1FoamQwamYweURRVTlsWFhXcURDZkpydWVoaVwvc0xCOG1QcHJlMyszaFhkTFZwQUxYMEdGRHptVWxlbWtsRkN6IiwibWFjIjoiMzY2M2MxMWI2NjZmNzljZTllYzAxMWM5MTRkNTY1ODRjYWFjZDkwMDQzMmRlMjNkZWEwZmI5YjlkNzE0MmRmMiJ9; expires=Sun, 11-Dec-2022 18:09:53 GMT; Max-Age=1209600; path=/
XSRF-TOKEN=eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ%3D%3D; expires=Sun, 11-Dec-2022 18:09:53 GMT; Max-Age=1209600; path=/
X-Host: blu84.sf2p.intern.weebly.net
X-Revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
X-Request-ID: cf703e6db860c3b0833a1c7958568f13
Content-Encoding: gzip
att-100783.square.site/uploads/b/ec48aa80-6cf6-11ed-b6f7-675f944a14e1/icon_180x180_ios_Mzk0MT.png?width=180
200 OK 620 B URL HTTP/1.1 att-100783.square.site/uploads/b/ec48aa80-6cf6-11ed-b6f7-675f944a14e1/icon_180x180_ios_Mzk0MT.png?width=180
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d374e63cb8a6ddc72369b5c9f20f5223
da174ee8e75509221c5d25401fde35dcf0bcd48a
29e2d64688fde492546f2599f47a08a06aba0cf43024c3630dfd4ff731aaffb6
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET /uploads/b/ec48aa80-6cf6-11ed-b6f7-675f944a14e1/icon_180x180_ios_Mzk0MT.png?width=180 HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572592.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 18:09:53 GMT
Content-Type: image/webp
Content-Length: 620
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "guqu1b8Sq3kQlhYkFUhHU4t9zxC3exFXP0cu0ZGdmfs"
Fastly-Io-Info: ifsz=1211 idim=180x180 ifmt=png ofsz=620 odim=180x180 ofmt=webp
Fastly-Stats: io=1
Fastly-Transform-Stats: tus=2267 cr=1.95
X-Amz-Request-Id: tx00000000000003baa9e52-0063839e0a-c695612-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z928b
X-Storage-Object: 928bc2eb6f5795713b67e328067e3db541a1db0c32babec699a4291b286d5dd8
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10063-SJC, cache-pao17453-PAO
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1669572593.207949,VS0,VE36
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn79.sf2p.intern.weebly.net
att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
X-XSRF-TOKEN: eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0=
Content-Length: 83
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572592.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:53 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn67.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/Square%20Market.css
200 OK 393 B URL HTTP/2 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/Square%20Market.css
IP
Hash f0935782737336d7aedae7e9534d27be
34b49a0ffcd13e03ca2d1303d5a71773e2282362
728ed2ef57525be9b9a8541ffe47f7600ba08e3ce0646afce5b49736692f7745
GET /app/website/static/fonts/Square%20Market/Square%20Market.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 17 Sep 2019 17:09:50 GMT
x-rgw-object-type: Normal
etag: W/"a7ddbe9e253a4f3a9c6de33cf4f3ce60"
x-amz-request-id: tx00000000000000b7d07bc-00626682c3-4d6022f-las
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: dac0242964acdc08ef6cc16c666026a58a1e15a5
x-request-id: 118bb1c1a071abd6cc161598c41b7f5d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2910193
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.627942,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 393
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/62793.aa773f42a01dd4f765a4.js
200 OK 5.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/62793.aa773f42a01dd4f765a4.js
IP
File type ASCII text, with very long lines (11059)
Hash 21327be56a0983e9d8f07bbfbe8c8e3b
8924962591f26478862458419a13ee99a0ce12e8
b76acd27b9827bda0c0a84cae0f200cfd56c740a73b7dc4cc4ed51766e3b6117
GET /app/website/js/62793.aa773f42a01dd4f765a4.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 10 Nov 2022 16:33:04 GMT
x-rgw-object-type: Normal
etag: W/"207b9b85a041379d1aacb2ae83c3f461"
x-amz-request-id: tx00000000000002dbabff6-00636d2821-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/62793.aa773f42a01dd4f765a4.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 46ac2312f1e8a8c1c5b5d8129c0b407f58b6c202
x-request-id: db07abf6ce6b0eaf85c1a87cf371f485
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1474500
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.644763,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5290
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/40846.a57e3a8ee8e6235cd269.js
200 OK 3.9 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/40846.a57e3a8ee8e6235cd269.js
IP
File type ASCII text, with very long lines (10135)
Hash 4d5cf35f7af8bfb5855046d65613fdee
417edcc5f6806145e469e623640b80d78e4808e6
8ae35387968d088b0cc9c2c264f236a366b0d7cbf6134450acf18286048a4a4d
GET /app/website/js/40846.a57e3a8ee8e6235cd269.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:17 GMT
x-rgw-object-type: Normal
etag: W/"630e018251d928d196cae2e328d36580"
x-amz-request-id: tx000000000000020e8011e-006356f88d-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/40846.a57e3a8ee8e6235cd269.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a051c2338651fae04033e62402bf4ec80a81ae17
x-request-id: bf10c0503499ceb9f883332a3dc47fc1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 501495
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.647985,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3900
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/63481.9f2a08c61dcc257bd389.js
200 OK 6.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/63481.9f2a08c61dcc257bd389.js
IP
File type ASCII text, with very long lines (5948)
Hash 4b70b28df1cdfd54a94dd5e2815edf48
c5d8877126944e73243ada9d3e487b5481d3d4ef
b24d8b86be7a5624be1915e7401f32ca550a6c0bdaf9db4e68be2afe9cf5a76c
GET /app/website/js/63481.9f2a08c61dcc257bd389.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 19:52:55 GMT
x-rgw-object-type: Normal
etag: W/"b773ff7aca17244eeda3a411d655f7bd"
x-amz-request-id: tx00000000000002dd11338-00636c0570-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/63481.9f2a08c61dcc257bd389.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1d85258c5aa1728bc8de03dfdc70889024ddd45f
x-request-id: ad585728d2ef8c4bbbefc1b5932698d4
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 998718
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.651415,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6555
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/30577.62309d10b56238258bd9.js
200 OK 6.9 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/30577.62309d10b56238258bd9.js
IP
File type ASCII text, with very long lines (9128)
Hash 38a586a348bfd8f58b59a9948152161d
72ea51b7b63c5f4541b9d15281ac646f30917978
8c380f1c5e3ccb46ccab16c7da788ca8c044dc91a731def781368f99b1bb2001
GET /app/website/js/30577.62309d10b56238258bd9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:12 GMT
x-rgw-object-type: Normal
etag: W/"d1448a3fe7727e40d778c7d95a5206a2"
x-amz-request-id: tx00000000000002de3b316-00636c1aa6-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/30577.62309d10b56238258bd9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a80e6919be55cb6d5160dc63fd6f209d3a8ccad7
x-request-id: 9c2ac10e6c3b58e69ffe504a57fdbd0d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543491
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.652369,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6939
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/navigation-mobile.e7e38dc6300dee04b724.css
200 OK 6.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/navigation-mobile.e7e38dc6300dee04b724.css
IP
File type Unicode text, UTF-8 text, with very long lines (23786), with no line terminators
Hash d3c2c409de7c624b189ee82c6668ff32
b7f8afdb5f32e6259566c4d1d73fc21f31e1f963
1903c6d6f66d1f38236971f2445d239c8cf8633cffe3cc822ed2098ccbbc8f5b
GET /app/website/css/navigation-mobile.e7e38dc6300dee04b724.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:11 GMT
x-rgw-object-type: Normal
etag: W/"5cb6b271e7a8784afa7a1aa3dc6088ce"
x-amz-request-id: tx00000000000002de3b1a4-00636c1aa5-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a80e6919be55cb6d5160dc63fd6f209d3a8ccad7
x-request-id: ef796986e682394efe8f86651c5a39d0
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543490
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.653619,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6037
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/navigation-mobile.e2610a03845671adfbb3.js
200 OK 5.5 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/navigation-mobile.e2610a03845671adfbb3.js
IP
File type ASCII text, with very long lines (13843)
Hash a07b01b3ac2d8309f060ebf9ea0cb519
7bacf9bd0ba82835eb1ec4f1b01036c334e28728
32b7fe8172189d784cde86d1d5f9c3717b64befa8a1f70b1a79ee8dd788d035a
GET /app/website/js/navigation-mobile.e2610a03845671adfbb3.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:13 GMT
x-rgw-object-type: Normal
etag: W/"4dcaaefd4ed381fa09481007f6cac528"
x-amz-request-id: tx00000000000002dee98b0-00636c1ab4-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/navigation-mobile.e2610a03845671adfbb3.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 741a9f6382843d864a355792c57981261622d4b1
x-request-id: 711a8d0817a06feca1a6d881378e222e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1098961
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.655096,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5515
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/89814.74d069a81b2d6e38d1fb.js
200 OK 4.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/89814.74d069a81b2d6e38d1fb.js
IP
File type ASCII text, with very long lines (14056)
Hash e6afbc3746b25bf7dee879c8d4745f50
eef54184997bd99574016a6486916a799cc225c0
8b852949be452340f9d4d260ad5b39a354b9144c814ae40a7b8b7cc573170684
GET /app/website/js/89814.74d069a81b2d6e38d1fb.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:53 GMT
x-rgw-object-type: Normal
etag: W/"c19305d9caa402725120a0bfa4b905b7"
x-amz-request-id: tx00000000000002839f71e-006363d795-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/89814.74d069a81b2d6e38d1fb.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1d15aad34e0d20a973977ec67b3bf5090814a6cf
x-request-id: 60abd35681cb441e451450da7c8da703
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2084904
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.660474,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4345
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/54718.245aa5ac762371055630.js
200 OK 18 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/54718.245aa5ac762371055630.js
IP
File type ASCII text, with very long lines (35355)
Hash 4bf38fb56fc1588862f6497be5c192c2
fc9c643a2ac7a365880f33ad955a5b01b3100625
bd9f7ba5f1aed6c98a075d41855eae03c834512bc06f30027a606d406cf4a102
GET /app/website/js/54718.245aa5ac762371055630.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:12 GMT
x-rgw-object-type: Normal
etag: W/"2cdcffc92907984f3135700981a73509"
x-amz-request-id: tx00000000000002de3b4b5-00636c1aa8-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/54718.245aa5ac762371055630.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 09db0b9815d1fe8dac449ecc2a7da2c932739637
x-request-id: 5ea62770898f3934a29eb51b34719cb7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543491
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.660744,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17894
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/51710.aa1ab5e887c56ecc8cd6.js
200 OK 5.1 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/51710.aa1ab5e887c56ecc8cd6.js
IP
File type ASCII text, with very long lines (7190)
Hash 7f03d73c021430a5d43ae95d8e30503d
db4a01cadb497865b3bfa13effdb2fcf76f06ae4
9bffb3bef9dc704b93cbf7d7c5af3ac410e15ca5fb80b3b2fd4dabd5698c32e6
GET /app/website/js/51710.aa1ab5e887c56ecc8cd6.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 27 Oct 2022 18:30:35 GMT
x-rgw-object-type: Normal
etag: W/"c990a626dbce9180c84bbc38211edfb4"
x-amz-request-id: tx0000000000000231e0a6c-00635aceb5-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/51710.aa1ab5e887c56ecc8cd6.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0d7c90f30a41bca94e63fc158c5c3545c658bddc
x-request-id: 78f691eab3cd0501a1d9e856f7e9fe22
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2225778
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.661656,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5069
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/cart-1.3eec0a9419c1482e001a.css
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/cart-1.3eec0a9419c1482e001a.css
IP
File type ASCII text, with very long lines (18727), with no line terminators
Hash 159abcbbfc0ed676b6b3ca27820e2959
9e6ad93f46f25c5a8d9bd43bebd7a1ca5f0b3fa0
71bae24ca47e78d606b84e88860dee883bb66b019fb5df5f32576cfcee201691
GET /app/website/css/cart-1.3eec0a9419c1482e001a.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Mon, 14 Nov 2022 16:17:19 GMT
x-rgw-object-type: Normal
etag: W/"1993a641110abb27135f886ba032d520"
x-amz-request-id: tx000000000000031a87cfb-0063726a71-c696eea-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 413ba75a29d332c4bd3f3593b6905d7bbfa563ef
x-request-id: 8b9b8b46a02221f17b32cfb9b1afed89
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1129855
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.662634,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5048
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/cart-1.1be73acbb397bc147579.js
200 OK 37 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/cart-1.1be73acbb397bc147579.js
IP
File type ASCII text, with very long lines (21077)
Hash ba5eb3aa4a7c101b0e08b08e6b4d862e
ce10019331d8477f1eab44e7460b18b76d6fee3a
8adcf46e542f5957272735920401c63a7be700d4101eae1b8e3ae33682bb2e24
GET /app/website/js/cart-1.1be73acbb397bc147579.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 22 Nov 2022 21:36:59 GMT
x-rgw-object-type: Normal
etag: W/"490156037a0571fc6c6c298343e9df81"
x-amz-request-id: tx000000000000037e6bd21-00637d4153-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/cart-1.1be73acbb397bc147579.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
x-request-id: 0b1793fc34946b60daaf06b0c88f5ef0
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 419354
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.663567,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37354
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/54718.da51bd6643a31ba33d96.css
200 OK 6.4 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/54718.da51bd6643a31ba33d96.css
IP
File type Unicode text, UTF-8 text, with very long lines (26374), with no line terminators
Hash c5c20eaadc8fd786b6898541a8697dfb
9f42a51e4f846bb90940d5d718a0161888078637
136c2770abb8e34a06995f23df48ccb4c73c7ac0714f2b30f82453b34abc257a
GET /app/website/css/54718.da51bd6643a31ba33d96.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:50 GMT
x-rgw-object-type: Normal
etag: W/"0581e7ff508f8692a04837f046c851ab"
x-amz-request-id: tx0000000000000374c3d09-00637c0cf4-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a051c2338651fae04033e62402bf4ec80a81ae17
x-request-id: 4ef5929efb4fddfb6c992a6346df1a83
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 498429
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.660640,VS0,VE8
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6411
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/87175.8cb28fba4841e2aae6a3.js
200 OK 6.2 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/87175.8cb28fba4841e2aae6a3.js
IP
File type ASCII text, with very long lines (8568)
Hash 82aade6982e58c8f130c672065ef71c2
4dad4bf833fdd7d12b356056805b90b6cf19fc1e
108c869bec97863d35e578c9e2e31ee871b095521a094890e356d903321c1e20
GET /app/website/js/87175.8cb28fba4841e2aae6a3.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:53 GMT
x-rgw-object-type: Normal
etag: W/"323196f2df332bf1375532dd9b885b33"
x-amz-request-id: tx0000000000000274af5bf-006363d78e-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/87175.8cb28fba4841e2aae6a3.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1499bd9c089c611f4515556ef7fc980a150cc9ef
x-request-id: 95d53642d15f4e675c697eb2eec49dbf
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2084903
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.677450,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6213
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/85620.b56e5b3efc0ca4e93d63.css
200 OK 5.2 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/85620.b56e5b3efc0ca4e93d63.css
IP
File type Unicode text, UTF-8 text, with very long lines (20745), with no line terminators
Hash 303decbb398138cbc0d78946f06f1377
09d0c0857d24bc1c98f5efd18e774e645c56bd35
31efb90ca6520fc9d75ec922eaa324bf20607d78637f84b07365e3ef592bf8f2
GET /app/website/css/85620.b56e5b3efc0ca4e93d63.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:50 GMT
x-rgw-object-type: Normal
etag: W/"31b76bb33ec73c108ab1a34a896a2431"
x-amz-request-id: tx0000000000000272ed626-006363d79c-c6aed46-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 46ac2312f1e8a8c1c5b5d8129c0b407f58b6c202
x-request-id: d06b879fee039fa4f7bb6e1e6897b425
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1474500
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.678683,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5198
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/header-4.0db0698fd6ed2a1aa0a7.css
200 OK 5.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/header-4.0db0698fd6ed2a1aa0a7.css
IP
File type Unicode text, UTF-8 text, with very long lines (21699), with no line terminators
Hash 81d02a64ebbef8aea91ad3974ddcf202
4f0e0b90a9eab536e3834b8e023d1a44ad4b4e73
fd2689e28c30c5f2c528f1f2346b8ff0a52358b3eb8edf4df21d679ddc73d340
GET /app/website/css/header-4.0db0698fd6ed2a1aa0a7.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 22 Nov 2022 21:36:58 GMT
x-rgw-object-type: Normal
etag: W/"04cdb448ca8db654d186bc2d6befb2ff"
x-amz-request-id: tx000000000000038417b40-00637d415c-c695612-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
x-request-id: 3f5d0b1d5da8171af79f8c79441fb7a1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 418844
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.744564,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5599
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/header-4.40af41a8a1bb085de747.js
200 OK 29 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/header-4.40af41a8a1bb085de747.js
IP
File type ASCII text, with very long lines (23561)
Hash 59630eb1af1ba84fd172914edf3797da
c90ac8966333bf391ff094c873cf51f351306be4
98e3a7f57bbaa2ea57c0e93cbc6c47c862d8b30d0b8277231c28538f35067587
GET /app/website/js/header-4.40af41a8a1bb085de747.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 22 Nov 2022 21:36:59 GMT
x-rgw-object-type: Normal
etag: W/"f0ccbf4f33bd17471f1870d04b1df280"
x-amz-request-id: tx000000000000038417f99-00637d4162-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/header-4.40af41a8a1bb085de747.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
x-request-id: 1e41249f10cddeaeb5b0020ac6177c92
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 418844
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.745062,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29317
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2428
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 18:09:53 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Mon, 27 Nov 2023 18:09:53 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://att-100783.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
att-100783.square.site/square.ico
200 OK 6.5 kB URL HTTP/1.1 att-100783.square.site/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET /square.ico HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6IlhZQW1IVHVZc1lleG51VEFPNkhWeWc9PSIsInZhbHVlIjoiTmRvZ1JnOHVSNDRQbmZ0bDFJdXhYVDR4VFJwdWpESjVNMEdzUXplMmhHelFcL01PQVJWQlYwWUxETDc1ZEJRZVFkcTI1Q2lEZ00zcGc0QlVqdTZ0M05TSmZYXC9ucVJZXC9wYmIyT3R1eVZEY3dJSzF0MHRhZXRsc1gzbmxYWk1SaTMiLCJtYWMiOiI2MTA4NzMzYWM1YzgwNDk4ODdkOGQ1MTE3YmQ4N2Q5ZTkzODdmZjI1MjA1YmY4YzVlMzEzN2M4NDRiZDc0ZGZhIn0%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572592.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 18:09:53 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001a5c165-00628473f6-b9fbc77-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu64.sf2p.intern.weebly.net
X-Revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
X-Request-ID: 797651eab24ceb027c476413adf0cb1d
cdn3.editmysite.com/app/website/js/26267.78a7b8e043fd38ce5bed.js
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/26267.78a7b8e043fd38ce5bed.js
IP
File type ASCII text, with very long lines (8710)
Hash 427c7fe2b3d549712100f6820b08efbd
c229680202f32a5d973fd8f91f4be59b9c050e28
d9ad555d0cc050b5522d23427dbb81b4be0bb3182e979e53359916e144f5d901
GET /app/website/js/26267.78a7b8e043fd38ce5bed.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 13 Sep 2022 23:09:04 GMT
x-rgw-object-type: Normal
etag: W/"da9c41584ada728a23d91b0505f40439"
x-amz-request-id: tx00000000000003d9c14bc-0063210df6-bfe27ea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/26267.78a7b8e043fd38ce5bed.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 64414abb58e4acfdd0b6e55daa9d9489195edb4b
x-request-id: fd8001a153b45861e09330465afd79fa
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1106760
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.809739,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3577
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/75551.55bd75fe08a64f107366.css
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/75551.55bd75fe08a64f107366.css
IP
File type Unicode text, UTF-8 text, with very long lines (21837), with no line terminators
Hash b8ebe693a77133623564cd563719c420
24b7f652280d0d03db2fc28cba20baf053b6ec48
ca59e2a8ea9412899cf9cecea1b474e7431300a4a3212b6f0b07f71151040640
GET /app/website/css/75551.55bd75fe08a64f107366.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:50 GMT
x-rgw-object-type: Normal
etag: W/"c71f8cf592cd7773fdd6d2393b221539"
x-amz-request-id: tx0000000000000282f0c65-006363d78c-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1499bd9c089c611f4515556ef7fc980a150cc9ef
x-request-id: 08bff9c100ba13ea2b6e30f8e4a22f5e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2084905
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.811436,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4970
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/75551.a47e4eb3fb16b8cb6e48.js
200 OK 14 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/75551.a47e4eb3fb16b8cb6e48.js
IP
File type ASCII text, with very long lines (18001)
Hash b26a444cc79038812d7f0397c8fdf61e
9f1934919c96a4bb4041ffe3c78b6db08a3ab56d
5bf809f8084c1fce1fddd47caf9113e31500bb95fc8a8da64b9e6fde4faa6528
GET /app/website/js/75551.a47e4eb3fb16b8cb6e48.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:53 GMT
x-rgw-object-type: Normal
etag: W/"46b87c529dedd12f5cfd9b10e4685e46"
x-amz-request-id: tx00000000000002860826a-006363d793-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/75551.a47e4eb3fb16b8cb6e48.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 1d15aad34e0d20a973977ec67b3bf5090814a6cf
x-request-id: f5a827ec22506149a1b7d417bb10f846
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2084897
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.811947,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13492
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/86433.b17b97f6b33453fa2bf2.js
200 OK 12 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/86433.b17b97f6b33453fa2bf2.js
IP
File type ASCII text, with very long lines (14371)
Hash 6b9c177e503fca8fe708c2e29831d1ac
efb3b77ce4d300e0b1d926c091b595c5c6b98da7
e060b44158b1da81cf3d6f22a9d9838827cea02bc9785c6ce2dd96fb2cd01f90
GET /app/website/js/86433.b17b97f6b33453fa2bf2.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:12 GMT
x-rgw-object-type: Normal
etag: W/"a7a3e67f72192489d3821b78f0356a48"
x-amz-request-id: tx00000000000002ce4daf9-00636c1aa4-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/86433.b17b97f6b33453fa2bf2.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 09db0b9815d1fe8dac449ecc2a7da2c932739637
x-request-id: f14f95d79d64f3abe8f63e6592127b75
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543491
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.813748,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12416
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/73725.25f9ce067942fca9acb7.js
200 OK 6.1 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/73725.25f9ce067942fca9acb7.js
IP
File type ASCII text, with very long lines (6288)
Hash beaf696feb4754555af1f5abbc90e30f
15497397440470c6376b0ed4e68697da81dc128a
73b37051a8eaad3c4ef66e0dc9502fccbf1fbaf0f252d34412da9afb6e993085
GET /app/website/js/73725.25f9ce067942fca9acb7.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:12 GMT
x-rgw-object-type: Normal
etag: W/"05f0a18460a9b955720cbf915b6bfc65"
x-amz-request-id: tx00000000000002dee943d-00636c1aaf-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/73725.25f9ce067942fca9acb7.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 09db0b9815d1fe8dac449ecc2a7da2c932739637
x-request-id: 3b24b6bc948b275334a4a8b176135d8d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543316
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.816647,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6089
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/contact-us-1.b7af7f9cc876022d0fe4.css
200 OK 1.7 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/contact-us-1.b7af7f9cc876022d0fe4.css
IP
File type ASCII text, with very long lines (5436), with no line terminators
Hash 9b4d2fbf9f138c6a167c908d1039b319
737de231cc84c36cd1e536322d69a928fb3ca746
06c91ce7906451c52406d24ccdde87326ccf24d59089a38e4f20a1f9aa77267a
GET /app/website/css/contact-us-1.b7af7f9cc876022d0fe4.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:10 GMT
x-rgw-object-type: Normal
etag: W/"7fe2fe48ec65867456a97ec7e6d6e0ca"
x-amz-request-id: tx00000000000002dee9bad-00636c1ab7-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 09db0b9815d1fe8dac449ecc2a7da2c932739637
x-request-id: cd2f9d31bfac4e3b9eddc7166926e6f5
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543316
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.818591,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1735
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/contact-us-1.d29a1c0719d9da0dc41f.js
200 OK 791 B URL HTTP/2 cdn3.editmysite.com/app/website/js/contact-us-1.d29a1c0719d9da0dc41f.js
IP
File type ASCII text, with very long lines (1638)
Hash 2d80e865f1df71512989f924d9ab5d3d
9e22b7838107f1acef9a37f275a6b06d3095e74e
9be7dd653b0a42289e2c949d4bb0a1011d78f8b777af26538343baa9d204ccd1
GET /app/website/js/contact-us-1.d29a1c0719d9da0dc41f.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:18 GMT
x-rgw-object-type: Normal
etag: W/"9ce8c2632e7b61c895e304a0bbbb31d0"
x-amz-request-id: tx000000000000020dd10ff-006356f8ae-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/contact-us-1.d29a1c0719d9da0dc41f.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: b71ae12a0ae22ce8f9c838c55a8daf2fe3e2d773
x-request-id: 3c5ae2024712fa737b9e7eae5191c10c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 928395
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.819409,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 791
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/46447.70310963ee7f53521366.js
200 OK 3.8 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/46447.70310963ee7f53521366.js
IP
File type ASCII text, with very long lines (7005)
Hash 08ff5f4440f1126ca73201efef914804
0b7456dc5a1055b36e14956d1ac62cdaa35aa7ed
8ccdcb0569c412c9305ffe9603c88d4e93cf6346e11d561f1f8683ad6f5fe920
GET /app/website/js/46447.70310963ee7f53521366.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 14:58:53 GMT
x-rgw-object-type: Normal
etag: W/"e67704be1dbaf6221ea2b7e1a4167fd8"
x-amz-request-id: tx0000000000000272eca28-006363d78e-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/46447.70310963ee7f53521366.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: b71ae12a0ae22ce8f9c838c55a8daf2fe3e2d773
x-request-id: 73bfe17163b7f3ca8bbed11ba2216b87
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 928458
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.821181,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3763
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/9918.740556d314178b1254dc.js
200 OK 12 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/9918.740556d314178b1254dc.js
IP
File type ASCII text, with very long lines (11873)
Hash 9820308b4891058c17401bc3dbb6724d
0a3bb006a6545339e7ed8c65584ff019509b6ad6
4d7b2ad2a4073dd04192c159c440226f0dd2343c1a0e0a32402176c0e3ef6ab3
GET /app/website/js/9918.740556d314178b1254dc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 19:52:56 GMT
x-rgw-object-type: Normal
etag: W/"7564ed068f24bd3c06a8c7478fdb1f0e"
x-amz-request-id: tx00000000000002ddbcfbd-00636c0570-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/9918.740556d314178b1254dc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 37c657a6c52703f3b77167c4636391f878524013
x-request-id: bb73101d390ac2932a0720162376d4ad
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1548873
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.822265,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11583
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/footer-7.37a241c2947cefd03bfc.js
200 OK 1.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/footer-7.37a241c2947cefd03bfc.js
IP
File type ASCII text, with very long lines (4862)
Hash b16de8bcc4be647d8028328eea812192
471722048d6dbac50b8873f78380775719d7097a
f13bf8606f8bd4d12a8115b70de70ea75edbd401bd25db7560542cf88668e8b5
GET /app/website/js/footer-7.37a241c2947cefd03bfc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:19 GMT
x-rgw-object-type: Normal
etag: W/"ad9430fe5f7a13045db57a3384fef3ad"
x-amz-request-id: tx00000000000002109af8e-006356f895-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/footer-7.37a241c2947cefd03bfc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a8d88e993a93bd9817ee7244258c4bc5ea4f8cc7
x-request-id: 2483587321d6c3c3b05fb518119244d7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1014892
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.825737,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1292
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/footer-7.526fbb1696df135a54c3.css
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/footer-7.526fbb1696df135a54c3.css
IP
File type ASCII text, with very long lines (12648), with no line terminators
Hash cd837a14bc9021628c85549cbb7ce68f
96519311288b6707bef2d3fc2c60ef5c86a37f6b
d16b80de6793be21a13b4b782e1a4e124038eff154f63091a4fdce06e3724225
GET /app/website/css/footer-7.526fbb1696df135a54c3.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 09 Nov 2022 21:23:10 GMT
x-rgw-object-type: Normal
etag: W/"f60774e59eb8280024fce915fbf4460b"
x-amz-request-id: tx00000000000002de3ba63-00636c1aae-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 09db0b9815d1fe8dac449ecc2a7da2c932739637
x-request-id: 2f82aa39a6135eeb0182e75f00676abe
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1543491
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.825050,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3577
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
200 OK 351 B URL HTTP/2 cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
IP
File type ASCII text, with very long lines (626), with no line terminators
Hash ee20922f55875dd45d7acae546cadedc
491672dcd84153d29c9e2346e0f78d1fef5e729d
6594eb11c5c147a510920933dbd3177b6678ce61f0bdc38a6377761534792336
GET /app/website/css/free-footer.86d148e5cb2be7f08d49.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 14 Jul 2022 19:54:09 GMT
x-rgw-object-type: Normal
etag: W/"607e0fd2b514ffdc06c62b1eb1bc428b"
x-amz-request-id: tx00000000000003106c3ab-006372be75-c6aed46-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: dc3e8c554bdd1a0853a3631849a999d1346b5f4d
x-request-id: 72cbe81acfb270119614b8c0a550566a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 1090205
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.958756,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 351
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/free-footer.a94ee2edaff655322921.js
200 OK 3.2 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/free-footer.a94ee2edaff655322921.js
IP
File type ASCII text, with very long lines (7343)
Hash f75aaa97470cbd81c43f87c5b19ed668
9b9c8ed8542db067871da272303cb574542b4b5d
eb7283009d353c23c6891490849ed7a8353f70ebfb9512f75e86f6f2fb34790e
GET /app/website/js/free-footer.a94ee2edaff655322921.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 24 Oct 2022 20:40:19 GMT
x-rgw-object-type: Normal
etag: W/"c00a3908b4152cdcffcd572429addb24"
x-amz-request-id: tx0000000000000200018a1-006356f89a-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/free-footer.a94ee2edaff655322921.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0d7c90f30a41bca94e63fc158c5c3545c658bddc
x-request-id: cb7b70c1da75aeb0622fa993992e3c48
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:53 GMT
via: 1.1 varnish
age: 2225775
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572594.959821,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3181
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fc68a5cd86f3e5ba2e6490a6b8f01582
9241584d6d287b2d8a66b6aaa77a1993a6919bba
7767d070134ab22f0e5705d5c2505059e471df9f667568d7f885ac25f4eb3046
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5237
Cache-Control: max-age=140050
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 18:09:54 GMT
Etag: "6383138f-1d7"
Expires: Tue, 29 Nov 2022 09:04:04 GMT
Last-Modified: Sun, 27 Nov 2022 07:36:47 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1886
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 18:09:54 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Mon, 27 Nov 2023 18:09:54 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://att-100783.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 79 B URL HTTP/1.1 att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ==
Content-Length: 77
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572593.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104; websitespring-xsrf=eyJpdiI6Ind2YklsaklxUHFJWGpuQzdFRVwvdmR3PT0iLCJ2YWx1ZSI6ImNkZzlneWFQeVowQm95ajJyVTljeXJIeXdFSVwvMFp4bGlnbllZVFwvYmU5Z043aGhPOVNIT3FxVEtEWldjK0NpR1FoamQwamYweURRVTlsWFhXcURDZkpydWVoaVwvc0xCOG1QcHJlMyszaFhkTFZwQUxYMEdGRHptVWxlbWtsRkN6IiwibWFjIjoiMzY2M2MxMWI2NjZmNzljZTllYzAxMWM5MTRkNTY1ODRjYWFjZDkwMDQzMmRlMjNkZWEwZmI5YjlkNzE0MmRmMiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:54 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn149.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
att-100783.square.site/uploads/b/5991066b34bcd7a880755d9719ab18d9f0b2a54eeb5483af39162b09fa1cab6d/cool_1669404417.png?width=400
200 OK 2.0 kB URL HTTP/1.1 att-100783.square.site/uploads/b/5991066b34bcd7a880755d9719ab18d9f0b2a54eeb5483af39162b09fa1cab6d/cool_1669404417.png?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b9c9732f75e2228b7ec0421558d1bd2a
4a507a595389780562dac9df431c5ef0da95eab0
e802bd038e4e3a29049d3914dc5e9d60db6f6fd548dbdf6b1491113573101054
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET /uploads/b/5991066b34bcd7a880755d9719ab18d9f0b2a54eeb5483af39162b09fa1cab6d/cool_1669404417.png?width=400 HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572593.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104; websitespring-xsrf=eyJpdiI6Ind2YklsaklxUHFJWGpuQzdFRVwvdmR3PT0iLCJ2YWx1ZSI6ImNkZzlneWFQeVowQm95ajJyVTljeXJIeXdFSVwvMFp4bGlnbllZVFwvYmU5Z043aGhPOVNIT3FxVEtEWldjK0NpR1FoamQwamYweURRVTlsWFhXcURDZkpydWVoaVwvc0xCOG1QcHJlMyszaFhkTFZwQUxYMEdGRHptVWxlbWtsRkN6IiwibWFjIjoiMzY2M2MxMWI2NjZmNzljZTllYzAxMWM5MTRkNTY1ODRjYWFjZDkwMDQzMmRlMjNkZWEwZmI5YjlkNzE0MmRmMiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 18:09:54 GMT
Content-Type: image/webp
Content-Length: 2030
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "oAczRdelL3XbY4wtGILxq2824J72e1bxnYK4SA/IGUU"
Fastly-Io-Info: ifsz=2549 idim=73x30 ifmt=png ofsz=2030 odim=73x30 ofmt=webp
Fastly-Stats: io=1
Fastly-Transform-Stats: tus=9333 cr=1.26
X-Amz-Request-Id: tx00000000000003a13ca88-0063811bb9-c699baa-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: zffab
X-Storage-Object: ffabb532fc3612ae5f3d7898774643b5a103cd590ab04c2202837eb8849a5128
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 503
X-Served-By: cache-sjc10079-SJC, cache-pao17455-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1669572594.207674,VS0,VE1
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu47.sf2p.intern.weebly.net
att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 att-100783.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ==
Content-Length: 89
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572593.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104; websitespring-xsrf=eyJpdiI6Ind2YklsaklxUHFJWGpuQzdFRVwvdmR3PT0iLCJ2YWx1ZSI6ImNkZzlneWFQeVowQm95ajJyVTljeXJIeXdFSVwvMFp4bGlnbllZVFwvYmU5Z043aGhPOVNIT3FxVEtEWldjK0NpR1FoamQwamYweURRVTlsWFhXcURDZkpydWVoaVwvc0xCOG1QcHJlMyszaFhkTFZwQUxYMEdGRHptVWxlbWtsRkN6IiwibWFjIjoiMzY2M2MxMWI2NjZmNzljZTllYzAxMWM5MTRkNTY1ODRjYWFjZDkwMDQzMmRlMjNkZWEwZmI5YjlkNzE0MmRmMiJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 18:09:54 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu80.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=dceccfe6-fa70-49a5-b7e7-2da1c080952c&batch_time=1669572593492
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=dceccfe6-fa70-49a5-b7e7-2da1c080952c&batch_time=1669572593492
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 78bf383e30237786c071c1817fbd5eb4
56f92edf8b5e779aa1496de13a698b27e210064c
89dc8d129621dd429c7dd962c6f2315481cdd28c813ad64a7c60f65d5cb9378b
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=dceccfe6-fa70-49a5-b7e7-2da1c080952c&batch_time=1669572593492 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16240
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Sun, 27 Nov 2022 18:09:54 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=511abc9e-364e-4eb3-86ae-202d191953ab&batch_time=1669572593594
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=511abc9e-364e-4eb3-86ae-202d191953ab&batch_time=1669572593594
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6fde3cd317344dd9b68e8d0dcc3b280b
14002492656742da639b566d66259c2ffd5a0426
57a5f6821e4f69af949dbe0d875ca9c562611574f5a57bf180e5da2e3744b499
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-8b6d9d8&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=511abc9e-364e-4eb3-86ae-202d191953ab&batch_time=1669572593594 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16363
Origin: https://att-100783.square.site
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Sun, 27 Nov 2022 18:09:54 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
att-100783.square.site/app/website/square.ico
200 OK 6.5 kB URL HTTP/1.1 att-100783.square.site/app/website/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert openphish AT&T Inc.
fortinet Phishing
GET /app/website/square.ico HTTP/1.1
Host: att-100783.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6Im1JK2hydVNIN2R2XC9UN3Zjdk5tWFhBPT0iLCJ2YWx1ZSI6IjAzRGdYQ0JOb2pMMmI1ejVZaDBFREpHZDk2SEc2RHo1XC9GbHpiWm9pNE0yVHYwRWtXYTBiYWpHeDF2UmErdVRHeFwvVlM0aWM1VjJvZU5mMmlkZUVHREtRWFMrQ0ZVRU9jWklGejRFaUZHcm5EemwweE92XC9nY1dQMWx0VVF0R1lWIiwibWFjIjoiNTIwMzFhZjRkNGQyMTYwZjc2ZTJhM2MxNzRiNDIzNGRkYjIxZDViNjUzMmEzOWZmZmM5YWUxZThhNjczMmE4MyJ9; XSRF-TOKEN=eyJpdiI6Imx0K1F2dGVPMFl1ZXMxYkQzd0JKU1E9PSIsInZhbHVlIjoicEh4TnpYMFhHN3JDZlVYUFROeHlERjQ3YVZzaFdjSks1QzVVV05HU01mYTFLdjhuSUJCWlwvOWJVanNOdysrSnV6M1ZDQXltbzBvN1paVVwvRXZIYU9ZZmxEeFFMVG1JSFRCekRNdnVWemVqQ2Z2S3hDMitJOUtSdXFHaW1ZS3ZYMSIsIm1hYyI6IjgxYmJlMzg0YjQ5ZGZmNThmMDAyYWIwMzk3MDVhYmNkMzcyNTI5NmNkZWE5NTkxMTcyYTA0OWExZjljODdmNDMifQ%3D%3D; PublishedSiteSession=eyJpdiI6ImJiUVFBUzR5dUlnXC9tTkdHV3ZEaFNRPT0iLCJ2YWx1ZSI6IlcrTGJZcjhMa3A5YWVuQlwvN1dJcUJ4RndFck9sbDBBXC9BaE9KYk9qOHM2K2wzNHNOMEFEYjZYNk5NVE1YcW8wRUx2ZkxYZWxuTWFyU1pZNHVJZk9sWEprUGJvaTZoaDBXaSt4cUxXSGFzcmZ0RVJrYTJuRlEwaktHaUZ1NFwvSVhSIiwibWFjIjoiZmIwYWU1N2RlNjU2ODhkZDU1NmEyMTNiOGYyYzFkYTA1ZDdlMjAxNmYxODg1NjdmYTA5N2EzNTM1NmMzZDc0MyJ9; _snow_ses.a2e4=*; _snow_id.a2e4=efda89e5-4a2a-4743-b733-53727ce0def6.1669572592.1.1669572593.1669572592.ea2dab53-260c-48a8-bc42-7a194f4fdffc; _dd_s=rum=1&id=a8a770cb-6c33-41ee-90cf-4afaacfb7273&created=1669572592104&expire=1669573492104; websitespring-xsrf=eyJpdiI6Ind2YklsaklxUHFJWGpuQzdFRVwvdmR3PT0iLCJ2YWx1ZSI6ImNkZzlneWFQeVowQm95ajJyVTljeXJIeXdFSVwvMFp4bGlnbllZVFwvYmU5Z043aGhPOVNIT3FxVEtEWldjK0NpR1FoamQwamYweURRVTlsWFhXcURDZkpydWVoaVwvc0xCOG1QcHJlMyszaFhkTFZwQUxYMEdGRHptVWxlbWtsRkN6IiwibWFjIjoiMzY2M2MxMWI2NjZmNzljZTllYzAxMWM5MTRkNTY1ODRjYWFjZDkwMDQzMmRlMjNkZWEwZmI5YjlkNzE0MmRmMiJ9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 18:09:54 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001a5c165-00628473f6-b9fbc77-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu79.sf2p.intern.weebly.net
X-Revision: 8b6d9d887a47f8cceadf99cb849a3347de2cf18d
X-Request-ID: c649ad7cc4fb40284d95a0339968c5ba
cdn3.editmysite.com/app/website/js/languages/en.d69f032602a9a8656bf8.js
200 OK 0 B URL HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.d69f032602a9a8656bf8.js
IP
GET /app/website/js/languages/en.d69f032602a9a8656bf8.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://att-100783.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 23:25:35 GMT
x-rgw-object-type: Normal
etag: W/"88da55c6ac5b86a27462f8794b300ba2"
x-amz-request-id: tx0000000000000278488a3-0063644e55-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.d69f032602a9a8656bf8.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5b106465564fd8cfdc25e96fbccd2ff9dcb7a0ec
x-request-id: d06a245b8fc77a19a7522567339564c9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 27 Nov 2022 18:09:51 GMT
via: 1.1 varnish
age: 2054340
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669572592.845672,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 151425
X-Firefox-Spdy: h2
199.34.228.39
151.101.85.46
23.36.76.226
93.184.220.29
104.18.21.226