awenbvhv32tt-106677.square.site/
200 OK 11 kB URL User Request GET HTTP/1.1 awenbvhv32tt-106677.square.site/
IP
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23221)
Hash e6b14f1cdd4137e960c8fb3ae44b4724
27347827828db864e3fa3df545c6831b80e9944b
18db66382d2a75c9511d17df52c2ef43450fb9e91c2e7d7a6ffcb1d3cd4b5268
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET / HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Sun, 03 Dec 2023 02:39:40 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; expires=Sun, 17-Dec-2023 02:39:40 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; expires=Sun, 17-Dec-2023 02:39:40 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; expires=Sun, 17-Dec-2023 02:39:40 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
X-Host: blu137.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: e5b8a2fb198d0a15c1978600c8351139
Content-Encoding: gzip
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js
200 OK 5.1 kB URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12165)
Hash a7492af09b397dae7164c97ee2d4482d
fd33d97b8e2581b90521c871926a1c081b9f2158
099183900da1f3584590a1506bd27e8d07ef58380e03140f18c71f09c9216703
GET /app/checkout/assets/checkout/js/system.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 13 Jul 2023 19:54:24 GMT
x-rgw-object-type: Normal
etag: W/"a7492af09b397dae7164c97ee2d4482d"
x-amz-request-id: tx0000011d33b4e3e68a420-0064b0569b-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 384922
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 11
x-timer: S1701571181.868333,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5122
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL GET HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (2512)
Hash 99bbe560926e583b8e99036251deb783
8d81b73ae06f664f9d9e53dd5829a799bf434491
648e766bf519673f9a90cc336cbecede80dcbe3419b43d36ecbb25d88f5584a3
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 22 Nov 2023 22:54:01 GMT
etag: "655e8689-124fe"
expires: Thu, 07 Dec 2023 08:49:33 GMT
cache-control: max-age=1209600
x-host: blu145.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
age: 841806
x-served-by: cache-sjc10061-SJC, cache-bma1650-BMA
x-cache: HIT, HIT
x-cache-hits: 52, 6405
x-timer: S1701571181.867233,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css
200 OK 0 B URL GET HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/checkout/assets/checkout/css/wcko.31d6cfe0d16ae931b73c.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Wed, 29 Nov 2023 19:43:22 GMT
etag: "6567945a-0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 272229
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1701571181.869462,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 0
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.dafd946d8d31028dfe93.js
200 OK 29 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/runtime.dafd946d8d31028dfe93.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (56049)
Hash dd1498b067e75418dbee36f10b1cc429
ecf19c05ddcdff6d72d724442771971f86550aab
ab36313e657daf8c8b84a92d0446d8ad7c2d08a032a0fd13cda5f5740e780b15
GET /app/website/js/runtime.dafd946d8d31028dfe93.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 16:08:14 GMT
x-rgw-object-type: Normal
etag: W/"dd1498b067e75418dbee36f10b1cc429"
x-amz-request-id: tx000007c0301f1e2df2d66-00656a0554-db1a051-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.dafd946d8d31028dfe93.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: e961c9fc521d9420860316f921a6ca43fa5167c9
x-request-id: daf667a708797f80846c3bb9dfdc42a2
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 124155
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 15
x-timer: S1701571181.874575,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29343
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/vue-modules.72df5f47735d125461d0.js
200 OK 72 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.72df5f47735d125461d0.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (26504)
Hash c5801db07f71d754cac8bdc5e334d0df
8840f7abdc5fbb05a77bc7ecedfa0234a7b75211
45ed00c7aba9eea53670aca3f962ac68c38ec776a3c2ababdcfbc4b6d42438ea
GET /app/website/js/vue-modules.72df5f47735d125461d0.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:16 GMT
x-rgw-object-type: Normal
etag: W/"c5801db07f71d754cac8bdc5e334d0df"
x-amz-request-id: tx00000d29fd2edab25e9af-006552c0ae-db1a132-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.72df5f47735d125461d0.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: 708a0243f51691993ea40890f9b77fcf
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 1649055
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 23
x-timer: S1701571181.882753,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72077
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/languages/en.ba6625de6ed681a82c2f.js
200 OK 317 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.ba6625de6ed681a82c2f.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 317 kB (317429 bytes)
Hash e03220807a9f5ba2231629a34aa03e28
fe899b4eb84dbcdb8a508cfe97f9f1f2b411be9d
b489a1e79c657291810c0db0c072d046b83e88198186a56ac2c77f3f811d4c50
GET /app/website/js/languages/en.ba6625de6ed681a82c2f.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 09:30:13 GMT
x-rgw-object-type: Normal
etag: W/"e03220807a9f5ba2231629a34aa03e28"
x-amz-request-id: tx000002d9315f070bf1b10-006569a811-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.ba6625de6ed681a82c2f.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f3f571487d2c245e64ebb66ef1082c4383f55e87
x-request-id: 0c1d3efe90d2f6513480949aa49d54c5
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 148046
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571181.888240,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 317429
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.5142def2dd257dd6b4c5.css
200 OK 38 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/css/site.5142def2dd257dd6b4c5.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (64828), with no line terminators
Hash cc676f6d0f6a8d9f49bcfc9868b62a81
a93fa14928880bfa57e2e3a50a9560eb447c7c00
16e724615cd4cb392fda92e87de8a7252f066fb1a761103db3634347aa40273d
GET /app/website/css/site.5142def2dd257dd6b4c5.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Wed, 22 Nov 2023 21:05:10 GMT
x-rgw-object-type: Normal
etag: W/"cc676f6d0f6a8d9f49bcfc9868b62a81"
x-amz-request-id: tx00000e4a92ec7abdb58d9-00655e6d6e-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 4e0898ce440a49decc308c091c9441ba3edb60c8
x-request-id: 651276ab54702bc5d92b90cfc8ae0f1c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 883899
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1701571181.895955,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 38432
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/site.a8f1ff147d40a2f4ebc9.js
200 OK 982 kB URL GET HTTP/2 cdn3.editmysite.com/app/website/js/site.a8f1ff147d40a2f4ebc9.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (49237)
Size 982 kB (981886 bytes)
Hash 22bd5469a97c485b2b825ec79a5f9e9e
b79ed7eea452ee47e5b3456bc7aad28fcd245615
6b42d95a5ded3ce8b5115943f6f632dca8ca22a87175a9907bc291592d210875
GET /app/website/js/site.a8f1ff147d40a2f4ebc9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 01 Dec 2023 16:08:14 GMT
x-rgw-object-type: Normal
etag: W/"22bd5469a97c485b2b825ec79a5f9e9e"
x-amz-request-id: tx0000089b0ff22dfbb01e5-00656a055f-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.a8f1ff147d40a2f4ebc9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: e961c9fc521d9420860316f921a6ca43fa5167c9
x-request-id: cd392a7b314bd023651d4f1f20f09156
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:40 GMT
via: 1.1 varnish
age: 124155
x-served-by: cache-bma1649-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571181.894293,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 981886
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.24d762f8232a6811.js
200 OK 4.1 kB URL GET HTTP/3 cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.24d762f8232a6811.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type JSON data\012- , ASCII text, with very long lines (18701), with no line terminators
Hash dc87095a2d014fdd32cb6057f1d884b2
606b8c7d9632d552d72ec3b77041afaed0ea5454
c7c2fb4bba627d1ab604106aa8fe87323d566c8df2ac734a7e4a6351fc3e1aa3
GET /app/checkout/assets/checkout/imports.en.24d762f8232a6811.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4092
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 23:06:45 GMT
x-rgw-object-type: Normal
etag: W/"dc87095a2d014fdd32cb6057f1d884b2"
x-amz-request-id: tx000005ec3299d42b707d3-006567c4ce-db1a051-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/imports.en.24d762f8232a6811.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:41 GMT
via: 1.1 varnish
age: 271670
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 19
x-timer: S1701571181.375279,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json
200 OK 677 B URL GET HTTP/3 cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type JSON data\012- , ASCII text, with very long lines (2521), with no line terminators
Hash 47151733aa42eb6c4b78edb484819e33
cf2f241e5230948723d201e7a9690fa7c59a3021
dbd27f07a349678ce4cefb990e5b8d968105087b59901dc2c68ef9f204efd72c
GET /app/checkout/assets/checkout/locale-imports-map.0fd98a1748dc03f4.json HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 677
server: nginx
content-type: application/json
last-modified: Wed, 29 Nov 2023 16:41:11 GMT
etag: W/"656769a7-9d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:41 GMT
via: 1.1 varnish
age: 293159
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 18
x-timer: S1701571181.375268,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/36368.a0885747ef22882e2115.js
200 OK 4.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/36368.a0885747ef22882e2115.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (6439)
Hash 80cd6e5fa9e016e62ae97ab8a483864a
e4b79b1bec1918ea35ab9950ae05e20e729db31d
ff22b70f37e38ac8a9ccc340f49e3d6354d4f7ee9df6760db98961aeb0b8cdd8
GET /app/website/js/36368.a0885747ef22882e2115.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4803
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"80cd6e5fa9e016e62ae97ab8a483864a"
x-amz-request-id: tx000006abb1c8219ae794c-00656788ba-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/36368.a0885747ef22882e2115.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 6f18bf67536f0b1574c7f7a0b22b9161
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:42 GMT
via: 1.1 varnish
age: 287038
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1701571182.303701,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/54928.e7bf6478b85daa8fa544.js
200 OK 6.5 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/54928.e7bf6478b85daa8fa544.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (16347)
Hash aeee6779a5412fb377172c90307e8976
1603bb9093a4fbffc4bb27d5d837540e42ae3542
d00d0a9aed8b5359b7e7e4cbce1200c08dfdd977350ae34c16c4ccc2747f56d7
GET /app/website/js/54928.e7bf6478b85daa8fa544.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6517
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"aeee6779a5412fb377172c90307e8976"
x-amz-request-id: tx0000067ac8f64c5439322-00656788bc-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/54928.e7bf6478b85daa8fa544.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 17f8463eef382b3501ea6ba6b10ae91a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:42 GMT
via: 1.1 varnish
age: 287038
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 8
x-timer: S1701571182.310057,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/50774.6c28066e367c03654887.js
200 OK 3.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/50774.6c28066e367c03654887.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4205)
Hash d20cbf69f007b8d1a7e8f6c79060f98f
0d08302f9133d6a4d595b5fff05ec630ae301665
fa991b9e12855b1f0af284a15ecdb243c51b0fe3f56c30b87a698bf62f190d5f
GET /app/website/js/50774.6c28066e367c03654887.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3600
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:47 GMT
x-rgw-object-type: Normal
etag: W/"d20cbf69f007b8d1a7e8f6c79060f98f"
x-amz-request-id: tx000004a6c4942eccbc94d-00656788ba-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/50774.6c28066e367c03654887.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: e2b74204c593cc10b20c5509925f4124562dfcb9
x-request-id: fa5854094da2760d78a7faa8b5240d42
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:42 GMT
via: 1.1 varnish
age: 287037
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571182.317594,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/home-page.9b2fc1df7eabd1fadc6f.js
200 OK 6.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/home-page.9b2fc1df7eabd1fadc6f.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (20664)
Hash 119891e91dc5b48b34da95af18b35c68
f512859e0bf96f4adaf4e7d7acd6a61981c9628d
5de63b9a99d89052c8ed5b98d51ba66723b59dcb21ce496991f89f205544af6e
GET /app/website/js/home-page.9b2fc1df7eabd1fadc6f.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6159
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 18:51:48 GMT
x-rgw-object-type: Normal
etag: W/"119891e91dc5b48b34da95af18b35c68"
x-amz-request-id: tx000003ac8404c76ca7b34-00656788b6-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/home-page.9b2fc1df7eabd1fadc6f.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 80b224cacfa2d49feba2f86764e4292830792190
x-request-id: 884e184f78366e74338184fcb5ecfea8
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:42 GMT
via: 1.1 varnish
age: 287037
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571182.368913,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/home-page.74bc6c44281c650698a8.css
200 OK 409 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/home-page.74bc6c44281c650698a8.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (924), with no line terminators
Hash c15f76990b289605f4ed83b445dae60c
1794f43d0196f4a89af357e77fdb07bd0b4b4166
bac55151545a69c7126cb8e8bfef99e07e0f595a9d07f9003e3d8420ba2964d3
GET /app/website/css/home-page.74bc6c44281c650698a8.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 409
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 02 Nov 2023 20:02:40 GMT
x-rgw-object-type: Normal
etag: W/"c15f76990b289605f4ed83b445dae60c"
x-amz-request-id: tx000003bc82c6d3699a0c5-00654400c3-db1a051-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b7bf12796623a77cb2c69586f70d87852128c2d
x-request-id: 45db360985042861c9072bef66209f02
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:42 GMT
via: 1.1 varnish
age: 2615691
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571182.368703,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL POST HTTP/2 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subjectsentry.io
Fingerprint18:3C:11:53:56:65:8B:09:02:F1:6B:26:E3:C2:C9:37:E0:E8:72:98
ValidityTue, 08 Aug 2023 00:00:00 GMT - Sat, 07 Sep 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
Content-Type: text/plain;charset=UTF-8
Content-Length: 429
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 02:39:42 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
awenbvhv32tt-106677.square.site/uploads/b/d162fad0-bc3b-11ed-b33e-e168c2dfea64/icon_180x180_ios.png?width=180
200 OK 508 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/uploads/b/d162fad0-bc3b-11ed-b33e-e168c2dfea64/icon_180x180_ios.png?width=180
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3ebe0d5faf83dfa89cc44682d9490ba9
8fce0762d153197353310b431118db86c60a4895
0bbde4b643d7fa254a45e0f225acd64daed5396876ac03d7ca81109a33339cbd
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /uploads/b/d162fad0-bc3b-11ed-b33e-e168c2dfea64/icon_180x180_ios.png?width=180 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:42 GMT
Content-Type: image/webp
Content-Length: 508
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "08+sg8VPcZiSujI6b0So173HHZ0lL2mocUNEu2EMfiE"
Fastly-Io-Info: ifsz=828 idim=180x180 ifmt=png ofsz=508 odim=180x180 ofmt=webp
Fastly-Io-Served-By: vpop-haf2300706
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000b71d49f6eb538f6a-00654a4323-db1a099-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: ze232
X-Storage-Object: e2326203a5eeb253de161c5e48954aae69f8ef1540f8a690806ebee9f5ec77ab
Accept-Ranges: bytes
Via: 1.1 varnish
Age: 0
X-Served-By: cache-sjc10047-SJC
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1701571182.086597,VS0,VE53
Vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn141.sf2p.intern.weebly.net
awenbvhv32tt-106677.square.site/square.ico
200 OK 6.5 kB URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/square.ico
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /square.ico HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:42 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001af9993-00628473f6-b9fbc29-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu157.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: aed982661f204be46d70f2848a626db6
awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/chevron-left.svg
200 OK 216 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/chevron-left.svg
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6aa1efc78eeaabc61f81143850c56a20
785cfb7866be5b416bd474d6c4bcac5e25b61487
00c629ac07a53a8dd92ace0c212743ef17337c75436767830a81b66c246e3074
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/static/icons/sets/square/chevron-left.svg HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 2862246432371239335
x-datadog-sampling-priority: 1
x-datadog-trace-id: 457013622242183663
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:42 GMT
Content-Type: image/svg+xml
Content-Length: 216
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "6aa1efc78eeaabc61f81143850c56a20"
x-amz-request-id: tx0000080c99ee26697e2f8-0064386dba-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn68.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: b5f95292ef34649e769059b2c82b590d
awenbvhv32tt-106677.square.site/app/website/cms/api/v1/users/144997890/customers/coordinates?cache-version=2023-11-13
200 OK 70 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/cms/api/v1/users/144997890/customers/coordinates?cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1218d87291c388b22a1b0c30a497067a
720932b2a71b024d51746ab2073b76437c91a4fe
1fc295a5c684502f7f559a15e34a6579892b20a8f999d1937c6c4fb4eedf58e5
GET /app/website/cms/api/v1/users/144997890/customers/coordinates?cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 1526489165216953415
x-datadog-sampling-priority: 1
x-datadog-trace-id: 5005670532854448643
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Sun, 03 Dec 2023 02:39:42 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D; expires=Sun, 17-Dec-2023 02:39:42 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; expires=Sun, 17-Dec-2023 02:39:42 GMT; Max-Age=1209600; path=/; samesite=lax
X-Host: grn68.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: 34c8828dde94f3870a8fde6b06c9f8f3
Content-Encoding: gzip
awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13
200 OK 201 B URL POST HTTP/1.1 awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]&cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 5956603175757929725
x-datadog-sampling-priority: 1
x-datadog-trace-id: 5748243074336903349
Content-Length: 83
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:39:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu9.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/font.css
200 OK 393 B URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/font.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
Hash a7ddbe9e253a4f3a9c6de33cf4f3ce60
121dc4d397d856ca5a65afaa1792e4c12a53132d
305ed7422238f098fb7513413aa992da0ced50741e5286ced433e30f5bf59971
GET /app/website/static/fonts/Square%20Market/font.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 393
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 17 Sep 2019 17:09:50 GMT
x-rgw-object-type: Normal
etag: W/"a7ddbe9e253a4f3a9c6de33cf4f3ce60"
x-amz-request-id: tx000001f11c4bd92d07a71-006552b132-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 439791efca0f69b4c954de25ac96651b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 355259
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571183.358163,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/39593.04f6f9a71587784b6cb2.js
200 OK 4.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/39593.04f6f9a71587784b6cb2.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (9766)
Hash 8a1eae25da75bc5a354406a4db221549
534c601af0750423fef7a7adacb47f3544294de8
4e8ce3e90a056ce0639b46289c2bec99a57a43fa1d999a1104d52d00b6c04105
GET /app/website/js/39593.04f6f9a71587784b6cb2.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4596
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"8a1eae25da75bc5a354406a4db221549"
x-amz-request-id: tx00000c1df29c7bce68184-006553d279-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/39593.04f6f9a71587784b6cb2.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5cb69aef8532819de4da34e83139cd48e86b1121
x-request-id: 9ec52e718e4d8be2ac9216a478559fd1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 359089
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.403180,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/32949.3c0ae8d15da958c063f9.js
200 OK 7.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/32949.3c0ae8d15da958c063f9.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (7938)
Hash ee37b85429054da31c9777f4017f360f
fe147de038b6d648518bf21946912e15aa93c47f
253167006ee1389bfedf76c4846fda47de12024fdddcbd293aaf4b70f4be6023
GET /app/website/js/32949.3c0ae8d15da958c063f9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7621
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:03 GMT
x-rgw-object-type: Normal
etag: W/"ee37b85429054da31c9777f4017f360f"
x-amz-request-id: tx000002b0629b2971f1486-006552c0af-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/32949.3c0ae8d15da958c063f9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f3f571487d2c245e64ebb66ef1082c4383f55e87
x-request-id: 3cb56c7c82ee374fe187ef759bd223ac
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 165211
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.415885,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/navigation-mobile.459f4aaf66988229d6c6.css
200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/navigation-mobile.459f4aaf66988229d6c6.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (17880), with no line terminators
Hash 77cefc9fcde63168f3b083f78bfca75f
2adb16f2269831270244af2d4d9cb20efa740189
476056fe327bfab862d7425ecd0a07d87f6b7e3dc900cb08953929af733a34f5
GET /app/website/css/navigation-mobile.459f4aaf66988229d6c6.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4850
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:10 GMT
x-rgw-object-type: Normal
etag: W/"77cefc9fcde63168f3b083f78bfca75f"
x-amz-request-id: tx000009f69d3883bd86e04-006553d27a-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 10ee46481ff42f728f55c5d35921be7f
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571183.418348,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/navigation-mobile.87c5640c837d07a2290b.js
200 OK 12 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/navigation-mobile.87c5640c837d07a2290b.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (23823)
Hash ff45aa1cbe9eca16c21704aa39d92514
4e701259dc1aab013cd0ca675842144c16d7d1a7
10c64a159f7b87c11bd10eedb9f1b5eacfd733dd19fa35e1332737b786304b0c
GET /app/website/js/navigation-mobile.87c5640c837d07a2290b.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 11966
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:14 GMT
x-rgw-object-type: Normal
etag: W/"ff45aa1cbe9eca16c21704aa39d92514"
x-amz-request-id: tx0000044cf11f95a0eea26-006553d27b-db1a132-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/navigation-mobile.87c5640c837d07a2290b.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: a6908715fe4c8010872f4fc1e2a220e3
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.421471,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/36018.59579a99559c62f8cb5a.js
200 OK 4.0 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/36018.59579a99559c62f8cb5a.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (15083)
Hash ce6f8764493d3b212006b012bda86288
ae79aaf9c00a942087e7b13fa6d943028c043322
8ff44338b4d802f8e4af5025c312ce4c7abb4ea60c63575c157b88c549e2026d
GET /app/website/js/36018.59579a99559c62f8cb5a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3974
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"ce6f8764493d3b212006b012bda86288"
x-amz-request-id: tx00000dbdf64575eef39d0-006553d278-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/36018.59579a99559c62f8cb5a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 62ed9ed6e9bd11b228db6f0f44732ba9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.442977,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/96166.4f5274123177ece98285.css
200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/96166.4f5274123177ece98285.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (18956), with no line terminators
Hash 9178dcddb8989786967616096140810e
4f7c90b78b229c7c68cbe715475c60561c7d75d2
8d8388cf13245226fbd56d1d85917199819bd3792b5c008e8e0f92ec31f7cc0b
GET /app/website/css/96166.4f5274123177ece98285.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4871
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:08 GMT
x-rgw-object-type: Normal
etag: W/"9178dcddb8989786967616096140810e"
x-amz-request-id: tx000001b377193bd25ee59-006553d279-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: 7e79b268aabe4e8a723751ecba8e7819
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578980
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571183.450238,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/46217.715b7eb70cfa27cf8320.js
200 OK 16 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/46217.715b7eb70cfa27cf8320.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (39322)
Hash cea51148d197d5dbe9300fa21d9dffe0
a970645209ce81a3557ecd0c7a4bd2c324e5dd7a
6fa44a27b28e9437c68c12962690ae84014c6692fcaf41031ab3095ce0448ebf
GET /app/website/js/46217.715b7eb70cfa27cf8320.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 16191
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"cea51148d197d5dbe9300fa21d9dffe0"
x-amz-request-id: tx00000649e457e93518184-006553d282-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/46217.715b7eb70cfa27cf8320.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: 2c1cbdfe349bf1ccd9e65ee8b1d737d6
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.458533,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/25330.b21ed27ab5aba868554a.js
200 OK 3.6 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/25330.b21ed27ab5aba868554a.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4059)
Hash e8ded0acbd0ae16ee91d37505e729612
751531ae3d5b7ee399f38926c0602968fcd9f052
f30fdd058cbf64dac48a5fb074e3b0fd44bab7b12258b179b3572dbc35c302ce
GET /app/website/js/25330.b21ed27ab5aba868554a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3641
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:03 GMT
x-rgw-object-type: Normal
etag: W/"e8ded0acbd0ae16ee91d37505e729612"
x-amz-request-id: tx00000be04b8fc58097e96-006552c0b6-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/25330.b21ed27ab5aba868554a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: 92a931b943fa939baa521d5e64a7154b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1648965
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.461156,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/18384.942bb2d52a083f46c492.js
200 OK 3.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/18384.942bb2d52a083f46c492.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4135)
Hash cc245f7b85fa4dd8d40c46660ce75723
70e1a6dc2347a442f2b84940c64c459d92b35c67
e1e09f3eac9a2786911b5353b2c6c1d83697503456962208b020ae249056dcef
GET /app/website/js/18384.942bb2d52a083f46c492.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3811
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"cc245f7b85fa4dd8d40c46660ce75723"
x-amz-request-id: tx000004b8965d4a4d48100-006553d276-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/18384.942bb2d52a083f46c492.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 12ab7cc6ac2637f242c67cf8d21393d8
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.469487,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/cart-1.369c920ebe388f941b7c.css
200 OK 7.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/cart-1.369c920ebe388f941b7c.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (26775), with no line terminators
Hash f50b8842395b7f21165e95993cd26a7a
3ac0983541e1dfff64bcfc93e17ca36d7da94249
422c1a935fc13540b0a3d5b05e4998d338a0bbaf566b497d70ee443348b7eb72
GET /app/website/css/cart-1.369c920ebe388f941b7c.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7232
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:08 GMT
x-rgw-object-type: Normal
etag: W/"f50b8842395b7f21165e95993cd26a7a"
x-amz-request-id: tx00000bf19953fd4c7b5b5-006553d28b-db1a051-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: c2a72dfbce72d8eb7d58a1d7412a0e22bdb64d8f
x-request-id: eb13bb9325a1d9ee0f58c5b1d6793fec
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578980
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.479066,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/cart-1.91a21f42a6401c0afe1d.js
200 OK 33 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/cart-1.91a21f42a6401c0afe1d.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (9644)
Hash 51fbd06817c839c6f8809e0bce1a1349
93cf17402034ea3a85c726e96bea664d1e127c20
f6386dc9e0c1cb92bbc6d22f3331b029a8e2b98101a05ba63a52cb3b3132daee
GET /app/website/js/cart-1.91a21f42a6401c0afe1d.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 33048
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 18:32:12 GMT
x-rgw-object-type: Normal
etag: W/"51fbd06817c839c6f8809e0bce1a1349"
x-amz-request-id: tx000009eb61aaa104b6320-006568d5b1-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/cart-1.91a21f42a6401c0afe1d.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 104e83ccb57ee5598744bc029ddf5138be714b8d
x-request-id: 83f9148fec5795f30ed7a8c8e17964a9
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 201754
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571183.481673,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/81715.680c4eb9165b27b9c837.js
200 OK 4.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/81715.680c4eb9165b27b9c837.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (10798)
Hash 0c72698eaebf8ca2ecd49972773600b0
a9065df76646e1527ba88c7d1c7242c4f9d2181d
fcef5b984b305e85248dcb0b03f4ff5063237cda183851b0c0f067ee790342aa
GET /app/website/js/81715.680c4eb9165b27b9c837.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4899
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:13 GMT
x-rgw-object-type: Normal
etag: W/"0c72698eaebf8ca2ecd49972773600b0"
x-amz-request-id: tx000006981c467670570e2-006553d279-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/81715.680c4eb9165b27b9c837.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: ced608c807c196e7b1381a76d6852d9d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1701571184.532537,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/header-4.64ce2d4b0c9650730ae3.css
200 OK 6.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/header-4.64ce2d4b0c9650730ae3.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (24460), with no line terminators
Hash ed7c45d6b7782c572e4a00bfa7dafd12
7ade04a21af69a69dda0068f88150e6c349c54c2
ecf6849cbb6dda47a0511ae074c62419b6486e358b75dff3803ac63e33b0793f
GET /app/website/css/header-4.64ce2d4b0c9650730ae3.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6320
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 23:50:12 GMT
x-rgw-object-type: Normal
etag: W/"ed7c45d6b7782c572e4a00bfa7dafd12"
x-amz-request-id: tx000001f163e1bde36a9a1-0065669cbe-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 2ac420288a336db0c6e581cb20572f7b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 347569
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.534171,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
200 OK 262 B URL POST HTTP/1.1 awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e6007aba23fc5c9f4c2b261bb6a04dea
1f11beae2dff7289895f3cc9345a0cdb61233751
438fb9e1077181918e2393a3ba39c9b17edaef6bf932330646050fbe5624fa65
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 5057539114652224141
x-datadog-sampling-priority: 1
x-datadog-trace-id: 8061489819060634520
Content-Length: 78
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlFzYlM3TXZ1SHo5VkpoUlpYWHppVkE9PSIsInZhbHVlIjoiRmVSTmpwVWVnSytzbnRRYURadUFnRk9YcnBKeVFlbUJJUWhCeE1Gbk1LaHBoeVhhNElhc1dTRkZkcnJVWHFLYUcvcWJyaW9zcDNtdk9hRFZHRDlxRi9XWWpwSGpTdjhnUWdkelU1ZTFOWUZYV1NGTk11V0FRZVBvTEtQOTkzWUwiLCJtYWMiOiI5OTVjZGY2MzBjMzEwMTc2ODZkM2QyYTMzNDNiYzg0Y2EyNjIxMjAzMjNjZDg5NDMwNTk1NTBjNjdjNzgyNTliIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:39:43 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu74.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 262
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
cdn3.editmysite.com/app/website/js/header-4.5d73a7307522738205fa.js
200 OK 35 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/header-4.5d73a7307522738205fa.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (12535)
Hash c88deb89203e7c4457a40f8e790080fe
1b4d21e7bd44610618b4efbfd3999c879583487b
9ae9cdd5f9c79dbfa8234de04d7e4c0c8e9d620a31368cc283831c47ad9a73d5
GET /app/website/js/header-4.5d73a7307522738205fa.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 35402
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 18:32:12 GMT
x-rgw-object-type: Normal
etag: W/"c88deb89203e7c4457a40f8e790080fe"
x-amz-request-id: tx000002a60a4eeb4566734-006568d5e5-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/header-4.5d73a7307522738205fa.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 104e83ccb57ee5598744bc029ddf5138be714b8d
x-request-id: 038998e2dc44942db1b5774542a453c7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 201633
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.550124,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
200 OK 41 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 41400, version 1.0\012- data
Hash ade801c572e692ed6abe4213896eccc8
82a61609a657857d3a2b2a4e12d7db9546221f22
f321df4af5ea5d9ad9d0840c3f6b332567584620efedd1fade186123abc7479e
GET /app/website/static/fonts/Square%20Market/sqmarket-medium.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41400
server: nginx
content-type: font/woff
last-modified: Tue, 15 Sep 2020 17:37:49 GMT
x-rgw-object-type: Normal
etag: "ade801c572e692ed6abe4213896eccc8"
x-amz-request-id: tx00000315f6fbb1bc3b2fe-00654b3b50-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 7124b4dadfde01daf9340bde27ef95d505977a12
x-request-id: 34daeca5a3163af5147eb7729a7a35a5
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1890193
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.556286,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-regular.woff
200 OK 39 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-regular.woff
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 39020, version 1.0\012- data
Hash 6d82eada1d3af65a01d7a535b15ed1cc
b473e899cde33d7f903c754729ee41b46229a1e7
5e094fc97ee2575583299cc73a332e742c43a80e5fefeb3579fe3c5108c535f7
GET /app/website/static/fonts/Square%20Market/sqmarket-regular.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 39020
server: nginx
content-type: font/woff
last-modified: Mon, 16 Sep 2019 15:04:20 GMT
x-rgw-object-type: Normal
etag: "6d82eada1d3af65a01d7a535b15ed1cc"
x-amz-request-id: tx000001f6e30c978d198a2-006549773d-db1a132-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f5c020bdb7a5a3708de26c321ae9f5c735ca5e31
x-request-id: 60d2bd118731c9808c2ba6b7b7453a52
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 2257714
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.556272,VS0,VE1
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
200 OK 41 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/sqmarket-medium.woff
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Web Open Font Format, TrueType, length 41400, version 1.0\012- data
Hash ade801c572e692ed6abe4213896eccc8
82a61609a657857d3a2b2a4e12d7db9546221f22
f321df4af5ea5d9ad9d0840c3f6b332567584620efedd1fade186123abc7479e
GET /app/website/static/fonts/Square%20Market/sqmarket-medium.woff HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://cdn3.editmysite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 41400
server: nginx
content-type: font/woff
last-modified: Tue, 15 Sep 2020 17:37:49 GMT
x-rgw-object-type: Normal
etag: "ade801c572e692ed6abe4213896eccc8"
x-amz-request-id: tx00000315f6fbb1bc3b2fe-00654b3b50-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 7124b4dadfde01daf9340bde27ef95d505977a12
x-request-id: 34daeca5a3163af5147eb7729a7a35a5
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1890193
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.557353,VS0,VE0
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/87697.822e2def94e8fde84b40.js
200 OK 1.8 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/87697.822e2def94e8fde84b40.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (3987)
Hash c7728f66496429c6c25a03093f15bb23
642b0568a984397b7b633467f0ce15f2376caef5
85725f54a03ad3f84593f86a9b4db3d00f79bfb2ce928416a31ff122ec0084ec
GET /app/website/js/87697.822e2def94e8fde84b40.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1800
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:06 GMT
x-rgw-object-type: Normal
etag: W/"c7728f66496429c6c25a03093f15bb23"
x-amz-request-id: tx000007dda96763c2feb17-006552c0b0-db1eedd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/87697.822e2def94e8fde84b40.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 6f70e4df766a329cdf37b110aaffd896
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 338063
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.711260,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/80926.b1d4d7ba6efeb2909edc.js
200 OK 7.9 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/80926.b1d4d7ba6efeb2909edc.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (10524)
Hash dd9b5d6278c227eda8be4ef64f656158
1b155df13ec7b83a1d745cfc74247a8fadd793e4
c638f91b9f2a62135979554e1aabcb42e07a76f0ba87cf44b723ef0175f2b3b7
GET /app/website/js/80926.b1d4d7ba6efeb2909edc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 7937
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:13 GMT
x-rgw-object-type: Normal
etag: W/"dd9b5d6278c227eda8be4ef64f656158"
x-amz-request-id: tx000009b97179dcac518cf-006553d27b-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/80926.b1d4d7ba6efeb2909edc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2ddef175d7b52e9631d2a4071162b9db915208f6
x-request-id: 02798bbcb7cb8e850ceb8d83f8857e34
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1578979
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.715473,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/97595.68ff85aa10cd79557086.js
200 OK 15 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/97595.68ff85aa10cd79557086.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (22101)
Hash d313c77eaedb30a432413ad6952e773c
8257f0518c7980bb85f9d43ac8e82b010bf52dea
588d1ceb1a616965dd6d510cda84c2bb295f1f11ac0deea16da9806105163ddf
GET /app/website/js/97595.68ff85aa10cd79557086.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 14638
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 21:22:58 GMT
x-rgw-object-type: Normal
etag: W/"d313c77eaedb30a432413ad6952e773c"
x-amz-request-id: tx00000df870714b5ab40d7-006568fd91-e4e0628-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/97595.68ff85aa10cd79557086.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b5fed34a77627a136a80dd12eee249be8662054
x-request-id: 71eba50f9cbd5e2c351303f07b33ebfb
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 191530
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.715856,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/97595.518da2212ea5947dd036.css
200 OK 5.0 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/97595.518da2212ea5947dd036.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type Unicode text, UTF-8 text, with very long lines (20607), with no line terminators
Hash f795d86278abb599ec1d10490e055c68
7f4dd1a968e298c49d3607d346c46d328ffaf428
4d08613fdb997d3bf31be63dd7de03863cc68b911e5c297b721507e0e212b9f9
GET /app/website/css/97595.518da2212ea5947dd036.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 5011
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 30 Nov 2023 21:22:57 GMT
x-rgw-object-type: Normal
etag: W/"f795d86278abb599ec1d10490e055c68"
x-amz-request-id: tx000007654c5b315ad805c-006568fd99-db1eedd-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b5fed34a77627a136a80dd12eee249be8662054
x-request-id: a3dab84dd2bb4c0bc36a5c21d5843607
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 191530
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.715867,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/15889.ba25152ac864744b7d41.js
200 OK 4.1 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/15889.ba25152ac864744b7d41.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4957)
Hash 606372c9efe78c625b0eadc6e0b91129
1e57bed129750df6ae86bf426dcdb5ad88fcafcf
52a48cbb41e9a7310f07257a5740f3cfcfd88a9006e3dbaf80e60d9590bb3d5a
GET /app/website/js/15889.ba25152ac864744b7d41.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 4081
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 15:11:39 GMT
x-rgw-object-type: Normal
etag: W/"606372c9efe78c625b0eadc6e0b91129"
x-amz-request-id: tx0000065c9c6ddad18852d-0065538ea0-db1c67d-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/15889.ba25152ac864744b7d41.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 5f7e449f6d2e5830300e532d74694a12f7ee4814
x-request-id: 11b522db946a0049de0b5a654e051761
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1596232
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.716498,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/contact-us-1.4b1c5a6302226c133a56.css
200 OK 267 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/contact-us-1.4b1c5a6302226c133a56.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (579), with no line terminators
Hash 6dd8d151bbb7c0227696fd5a6e54b3d9
a19e52e010a3e3a22e953304d07a65214ee6475a
c5d39f5dd6fcae9fc1a0302cae2d91f0c88022d027d85c6bdf044c0de0482ba8
GET /app/website/css/contact-us-1.4b1c5a6302226c133a56.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 267
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:32:57 GMT
x-rgw-object-type: Normal
etag: W/"6dd8d151bbb7c0227696fd5a6e54b3d9"
x-amz-request-id: tx00000eaf8eb9fcc8a7dc2-006552c0c0-db1c716-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 911b2149809046e22d93d4f3e40e0f1efb188028
x-request-id: 901c70a452a0e63f970cea67d401f519
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 267138
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.717400,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/contact-us-1.e733c9fefe01d752c319.js
200 OK 782 B URL GET HTTP/3 cdn3.editmysite.com/app/website/js/contact-us-1.e733c9fefe01d752c319.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (1598)
Hash 5eedcf634746579b8706df7b1d45b239
9b08ad78615dc35c0dc6a1a8f8597634233efe27
46f5c135669438dcc1e89f1190ba533e22938252285af2c6d1916a77e5891eeb
GET /app/website/js/contact-us-1.e733c9fefe01d752c319.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 782
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 00:33:09 GMT
x-rgw-object-type: Normal
etag: W/"5eedcf634746579b8706df7b1d45b239"
x-amz-request-id: tx00000e926541982211d28-006552c0c4-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/contact-us-1.e733c9fefe01d752c319.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: a5449b80a95c772b5c645ad76d7ef6c139bbc615
x-request-id: b66c53b9773369f06cfe15f65cd7383a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1648965
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.719242,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/20042.84d550ee5799dd28c6bb.js
200 OK 10 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/20042.84d550ee5799dd28c6bb.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (14285)
Hash c0b3cf9e51ad5dc7eb5ef5a28f92925a
f8a4459d19fe5f19f20e92e71f66ef09fce829ff
5177d25fcb95ba1ce1fc37870d46836c7bf678589035fd23091341328e66bbc7
GET /app/website/js/20042.84d550ee5799dd28c6bb.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10458
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 20:01:12 GMT
x-rgw-object-type: Normal
etag: W/"c0b3cf9e51ad5dc7eb5ef5a28f92925a"
x-amz-request-id: tx00000065b93e7b3287f96-006553d27d-db1c716-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/20042.84d550ee5799dd28c6bb.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: ce7edf91351ddfa06c0de96f3795f5f7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 340924
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.725139,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/footer-7.b5b333de64ecdb6ddfd9.js
200 OK 1.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/footer-7.b5b333de64ecdb6ddfd9.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (4855)
Hash 601649aea11481ac66e0a294311cc3d1
116f807e6f73e31af58122904433dec03b343bfb
dc479d2e6e37d599f9dd0dbced672a951bde0f8ae95e9b05829371cde2fb89f3
GET /app/website/js/footer-7.b5b333de64ecdb6ddfd9.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 1296
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 16:18:35 GMT
x-rgw-object-type: Normal
etag: W/"601649aea11481ac66e0a294311cc3d1"
x-amz-request-id: tx00000655b8e4ca649f7d2-0065539e4b-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/footer-7.b5b333de64ecdb6ddfd9.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 72c646c2ff87fcb51a57a1971d3f35a422a833a5
x-request-id: 88919f7159c082887e2be74293a69530
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 354386
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 4
x-timer: S1701571184.742266,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/98371.539581cf6a2af8f64217.js
200 OK 11 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/98371.539581cf6a2af8f64217.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (11073)
Hash 4515b4621aa31ea53c01e28486aff027
1e768d71146088f153d8a7c93636c0cb785dcb84
f76254b64e1b5f40c6886f70b79f2e7e622ce9403fef47da5f01c78f5c683679
GET /app/website/js/98371.539581cf6a2af8f64217.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 10901
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Thu, 30 Nov 2023 21:22:58 GMT
x-rgw-object-type: Normal
etag: W/"4515b4621aa31ea53c01e28486aff027"
x-amz-request-id: tx000005ec67b88f6983869-006568fda5-db1a099-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/98371.539581cf6a2af8f64217.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b5fed34a77627a136a80dd12eee249be8662054
x-request-id: f73002caa45d245eb3b208b0be5ad5fe
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 191530
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1701571184.742305,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/footer-7.ba6a5d579d1974f9d76e.css
200 OK 2.3 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/css/footer-7.ba6a5d579d1974f9d76e.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (8235), with no line terminators
Hash 6b6568a09aa5a00866203db8798dc829
0c6b5c21e1736bbb237d5b3a773e9f87841a62ff
6a8bae7293a597d28bb0847bd498a846780b712bbb39e20f69e7726855136aae
GET /app/website/css/footer-7.ba6a5d579d1974f9d76e.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2282
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 30 Nov 2023 21:22:57 GMT
x-rgw-object-type: Normal
etag: W/"6b6568a09aa5a00866203db8798dc829"
x-amz-request-id: tx000008c865834ddfafa01-006568fda4-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b5fed34a77627a136a80dd12eee249be8662054
x-request-id: 8c339f66a6a94edf7966aae7d215e87f
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 191530
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.742295,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
200 OK 351 B URL GET HTTP/3 cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (626), with no line terminators
Hash 607e0fd2b514ffdc06c62b1eb1bc428b
9813c79ecc25a39fb2001780bd2a89a41f589be0
0e4c81150634a1580473d241b3d8d425776793cd1c3931c1d879065f63b88c8f
GET /app/website/css/free-footer.86d148e5cb2be7f08d49.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 351
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 14 Jul 2022 19:54:09 GMT
x-rgw-object-type: Normal
etag: W/"607e0fd2b514ffdc06c62b1eb1bc428b"
x-amz-request-id: tx000001461cf2b71497ba1-006552c32e-db1a099-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 984bd5ebcd9b57e87726ca3d0a603cd8b77f2430
x-request-id: 529e2f725de1755faa00862e5a18bfc1
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1562125
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.749477,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn3.editmysite.com/app/website/js/free-footer.80be4e0cd1ba575c27fd.js
200 OK 3.2 kB URL GET HTTP/3 cdn3.editmysite.com/app/website/js/free-footer.80be4e0cd1ba575c27fd.js
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type ASCII text, with very long lines (6763)
Hash e9961659980d2cf6b67a9751019dc2a2
18ea725af3bc6ae8f84c8dc413dbcb4bd35a72fc
c1b1ecb3ed335f08e705a3ff3f6e4273f62db39ba206388115c20855514ef517
GET /app/website/js/free-footer.80be4e0cd1ba575c27fd.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 3195
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 14 Nov 2023 15:11:40 GMT
x-rgw-object-type: Normal
etag: W/"e9961659980d2cf6b67a9751019dc2a2"
x-amz-request-id: tx0000087b9b2aac21d3b8b-0065538e97-db1a051-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/free-footer.80be4e0cd1ba575c27fd.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 984bd5ebcd9b57e87726ca3d0a603cd8b77f2430
x-request-id: d9b462003e08e269bd6672c1626d085e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
age: 1562125
x-served-by: cache-bma1658-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1701571184.749733,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=f06f0a64-63f9-4179-ab70-589d10a17a7d&batch_time=1701571188389
202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=f06f0a64-63f9-4179-ab70-589d10a17a7d&batch_time=1701571188389
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash fd344c2e65f2db6c519d14df2282c245
e2e83b4977749fa0cef67b502fd92536a478c5e1
31d9a1c9d70935fcb09a0817ee432afb50b750bbdcf877a15afbcac08a78a031
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=f06f0a64-63f9-4179-ab70-589d10a17a7d&batch_time=1701571188389 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15771
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
date: Sun, 03 Dec 2023 02:39:43 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/close.svg
200 OK 235 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/close.svg
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 1daa79e586c0c88959a8a47ec95688f5
2b5ddd4643f39e9bf8406fa7dd34be3694f887e4
9eccb2c7213a769a9c16859126e2227afc4b88bce8e538e4b70feeb9c009cece
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/static/icons/sets/square/close.svg HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 2318328254909619991
x-datadog-sampling-priority: 1
x-datadog-trace-id: 432385541433390706
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:43 GMT
Content-Type: image/svg+xml
Content-Length: 235
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "1daa79e586c0c88959a8a47ec95688f5"
x-amz-request-id: tx0000033ef99db9efe8484-0064386db9-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn68.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: 41abdb246bbe0b7e15dfa816aee3f2f9
awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/spinner.svg
200 OK 205 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/spinner.svg
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash b7b85a7b3f5575bcae909da71b04d588
86442aaf9a428a95cd7b00bd52c875618c4f9cdc
a6f7da657d6f069d0ee93cabff70a26c73d180090ba83df879aed55944a92066
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/static/icons/sets/square/spinner.svg HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 6160244917248439837
x-datadog-sampling-priority: 1
x-datadog-trace-id: 5029293391536806478
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:43 GMT
Content-Type: image/svg+xml
Content-Length: 205
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "b7b85a7b3f5575bcae909da71b04d588"
x-amz-request-id: tx0000006863c8813c75fa7-0064386db9-d955bdc-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu157.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: 4539508da0773cfefb4064b939b89e57
awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/close.svg
200 OK 235 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/close.svg
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 1daa79e586c0c88959a8a47ec95688f5
2b5ddd4643f39e9bf8406fa7dd34be3694f887e4
9eccb2c7213a769a9c16859126e2227afc4b88bce8e538e4b70feeb9c009cece
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/static/icons/sets/square/close.svg HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 5916948930759684960
x-datadog-sampling-priority: 1
x-datadog-trace-id: 1224298287184451874
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:43 GMT
Content-Type: image/svg+xml
Content-Length: 235
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "1daa79e586c0c88959a8a47ec95688f5"
x-amz-request-id: tx00000be50e70de9a1c473-0064386db9-d955ab0-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn49.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: baa383d95565fa2425a75f1e4814be60
awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/menu.svg
200 OK 196 B URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/static/icons/sets/square/menu.svg
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7eb63f2ff64f726044a6ce8cf9627dd7
0d40a515691bbceb67e0a444725a1a4f6a425500
acf5d79bfca5ac8a248a9e21f7caeff9be8161fe912f2df3dd894f719acd646d
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/static/icons/sets/square/menu.svg HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://awenbvhv32tt-106677.square.site/
x-datadog-origin: rum
x-datadog-parent-id: 1340854124886697788
x-datadog-sampling-priority: 1
x-datadog-trace-id: 2585762384568526060
DNT: 1
Connection: keep-alive
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:43 GMT
Content-Type: image/svg+xml
Content-Length: 196
Connection: keep-alive
Last-Modified: Thu, 13 Apr 2023 21:00:07 GMT
x-rgw-object-type: Normal
ETag: "7eb63f2ff64f726044a6ce8cf9627dd7"
x-amz-request-id: tx00000665f3b5e52e9f46b-0064386dbc-d95b1be-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu50.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: 8748cae1456de1076e6cb0c2e6c2aaa8
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=9fe08330-2ae6-4963-9f10-fecabc22650f&batch_time=1701571189094
202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=9fe08330-2ae6-4963-9f10-fecabc22650f&batch_time=1701571189094
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 05abbd52d4c02428126b2d82bb4289b7
ff58f90bfba841c93844c4b2b3ed93e35ec55793
eaca542644567b07a0e3d1842405fa9551ee25a6a42eb6025ed9a216901e598d
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=9fe08330-2ae6-4963-9f10-fecabc22650f&batch_time=1701571189094 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15919
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
date: Sun, 03 Dec 2023 02:39:44 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13
200 OK 182 B URL POST HTTP/1.1 awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]&cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 9105992833695333421
x-datadog-sampling-priority: 1
x-datadog-trace-id: 6650448760268401677
Content-Length: 89
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:39:43 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu47.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
17cefebbe6b585090d5e.cdn6.editmysite.com/uploads/b/17cefebbe6b585090d5e5a16dc99bb0b0c92d673db7ad9866dd57695ba831a34/att%20image_1678120996.jpg?width=400&optimize=medium
200 OK 6.7 kB URL GET HTTP/3 17cefebbe6b585090d5e.cdn6.editmysite.com/uploads/b/17cefebbe6b585090d5e5a16dc99bb0b0c92d673db7ad9866dd57695ba831a34/att%20image_1678120996.jpg?width=400&optimize=medium
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x267, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 51dbdb407276bf525c7e44ed7e69014d
b885b8e6436b41e373b9e18407fef70266fea093
d7e562db660d6c7e3d76c3cf14ad6231a74fbebff40050b53fc84c9c5399ee9b
GET /uploads/b/17cefebbe6b585090d5e5a16dc99bb0b0c92d673db7ad9866dd57695ba831a34/att%20image_1678120996.jpg?width=400&optimize=medium HTTP/1.1
Host: 17cefebbe6b585090d5e.cdn6.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6744
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
access-control-allow-origin: *
content-type: image/webp
etag: "RGvBBAQeaXRzZH90j5vqQc9ltJdEiqvF5i+2+0fQeu8"
fastly-io-info: ifsz=19503 idim=580x387 ifmt=jpeg ofsz=6744 odim=400x267 ofmt=webp
fastly-io-served-by: vpop-haf2300713
fastly-stats: io=1
server: nginx
x-amz-request-id: tx000006d18d3c23d8b3439-006561075c-db1a132-sfo1
x-rgw-object-type: Normal
x-storage-bucket: zc104
x-storage-object: c1040be94d0afc0ac4805aca127883410154129ee21254bf1e3d18c4096cab76
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:44 GMT
age: 0
x-served-by: cache-sjc1000133-SJC, cache-bma1658-BMA
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-timer: S1701571184.912689,VS0,VE195
vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13
200 OK 79 B URL POST HTTP/1.1 awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]&cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 3613861649602719640
x-datadog-sampling-priority: 1
x-datadog-trace-id: 7475937939345108521
Content-Length: 77
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:39:43 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu85.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
200 OK 262 B URL POST HTTP/1.1 awenbvhv32tt-106677.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e6007aba23fc5c9f4c2b261bb6a04dea
1f11beae2dff7289895f3cc9345a0cdb61233751
438fb9e1077181918e2393a3ba39c9b17edaef6bf932330646050fbe5624fa65
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]&cache-version=2023-11-13 HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0=
x-datadog-origin: rum
x-datadog-parent-id: 1346967028235223312
x-datadog-sampling-priority: 1
x-datadog-trace-id: 3450887121334029653
Content-Length: 78
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 03 Dec 2023 02:39:43 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu20.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 262
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=e20711f6-dcab-4c90-b5ba-ddfb44f165b8&batch_time=1701571189422
202 Accepted 53 B URL POST HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=e20711f6-dcab-4c90-b5ba-ddfb44f165b8&batch_time=1701571189422
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.browser-intake-datadoghq.com
Fingerprint90:98:16:E4:5F:36:C7:67:0F:C6:18:49:63:19:73:FC:82:36:C1:4E
ValiditySat, 17 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f204f708f1c1eff6f141c8f371e3c91e
5bd59b6a3ef58da66d12d201eb7c344b530a9280
62dd20011040176e469f08512c2b0dfe50221ed64dfe28ba619072940e19ff22
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Axhr%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-ac976d4&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=e20711f6-dcab-4c90-b5ba-ddfb44f165b8&batch_time=1701571189422 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15424
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 202 Accepted
date: Sun, 03 Dec 2023 02:39:44 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
awenbvhv32tt-106677.square.site/app/website/square.ico
200 OK 6.5 kB URL GET HTTP/1.1 awenbvhv32tt-106677.square.site/app/website/square.ico
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerDigiCert Inc
Subject*.square.site
Fingerprint5F:4C:27:EC:29:19:0C:05:88:97:9C:1F:2E:03:AC:5F:3E:32:B3:E2
ValidityFri, 10 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert OpenPhish phishing AT&T Inc.
GET /app/website/square.ico HTTP/1.1
Host: awenbvhv32tt-106677.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Cookie: publishedsite-xsrf=eyJpdiI6ImlKTVZBYXBZRVh0QWptYTBuQ0FaZ1E9PSIsInZhbHVlIjoiNlZSakMwZHJlNnVweVdiSmNsV1Zydk5TQndsTW5DTjg1YU1DN1dRUktMYTA1WWJvalRNZFVlQUlKeG15TCtFdGdONDNvNWdJZndaY1Vra2RZZzA0VXB1SXgyQjdXRVhHMW8yRWFtSmRvbFJZS0Q0YWRkZE9GUCtHNDh5ZDZvNkciLCJtYWMiOiJmODRhMTkzMjFkMmMwYTQyMTQ3YzQ5Y2VjODNlNjAwYTVkMWM3YzFiN2E1YzU0YmU1OThkODI1MTc4N2Q0YWI0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlBrbkZ0WkMvV0RTR01NR0dsbTBjRXc9PSIsInZhbHVlIjoiOWJJUDN6VTJPeXR4Mjh2cHBXeUhxeVFpL2EwNTR3dFZtR1I5aWtMSkxiK1NJb0NuaUZaQjg0cnlTaHp5emVwTTAwd2xyYUhISU8zSGl6VmpFTEs5WTRwL2ZjVXh6U1o1ZnRUMlp4YzN4bWVIK2xiK05zbk00STJUTy94NGk4UFYiLCJtYWMiOiJmOTQ3M2FjYjU1MDNhZDhhZTEwYmU2NzVmMzcwY2QzNzM5ZTEyMWUxOGEwZDFlOTA4YTZiMWM0ZGE1YWFiODE4IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6ImNwQXE1M0hpL3kwS1I5eXpLb09BZlE9PSIsInZhbHVlIjoiUnFBZFdqdW1zeUdiaEJ5eTBhM3VzeTVucnFZVGRMMDBucWxqd1NnQ2xpTVhjdk5aS0VqV3FBTkdrS3c4VVpTNWRMa20rTzlpRUtjYTBkQko3NlpRWVI4Wk90L1UvVk43enRqcThJU09leWJzWURYUlAvMWJkQUZCU2dqaVdrQ2kiLCJtYWMiOiJmZDBhNWJmMTMzNDI2NjEyMzNjMDY1YWUwYTQxZTdkYTY0ZDk5MTdjMjQyMjRmZjdiMzZmOTEzNWFlMGQ2NWNiIiwidGFnIjoiIn0%3D; _dd_s=rum=1&id=a1c5c6a7-7ee7-4ded-a78d-4c112b064f5c&created=1701571187478&expire=1701572087478; websitespring-xsrf=eyJpdiI6InczUnEvaGU5VWNpbEZwd0krc1lBN2c9PSIsInZhbHVlIjoiSUM5UWw4dHI2b2pON1hXald3a1RpcU14VU9HajAwaFlXZWl6RStOL0hHMUdRVUR0TjhuTk5oNVN5SW01MlVSK2c0V2xmQWRJM1pVbHJIa3cyVVRJOThiNWxzbnQrU0RlbHdNaFIyVzlrVWxHSlJGZXJIN2pRRmZzTWRKWVVNSFAiLCJtYWMiOiIxOGZlYjI5NGQ0MTMxZDgzN2M2NzMwNWMzZTZmNmEzNWZhY2UzNmM0ZTVkNmVkNWFhNGY1YjZkMzEwZGQ0MzQ3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 02:39:44 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001a88764-00628473fc-b9fbc20-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu125.sf2p.intern.weebly.net
X-Revision: ac976d4aaa7f3f96727305e5c3c016ddcc2a6ef4
X-Request-ID: 419f4238adf254f7e434ac2c64330048
cdn5.editmysite.com/app/store/api/v28/editor/users/144997890/sites/624052772388647595/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13
200 OK 3.9 kB URL GET HTTP/3 cdn5.editmysite.com/app/store/api/v28/editor/users/144997890/sites/624052772388647595/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13
IP
Requested by https://awenbvhv32tt-106677.square.site/
Certificate IssuerGlobalSign nv-sa
Subject*.editmysite.com
Fingerprint8D:09:E9:00:22:07:DC:77:D7:9F:B9:55:7D:0A:C1:8A:58:67:20:18
ValidityMon, 12 Jun 2023 23:15:31 GMT - Sat, 13 Jul 2024 23:15:30 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4316), with no line terminators
Hash be0b956e065fac7d56eb37884524db2a
316abcfbf3a0c038d1d49de4deed294b7aa747b9
bd469803d71589e52efcc7fa9333d053a48750e1f1ea5d42c077abc48c8e6fb3
GET /app/store/api/v28/editor/users/144997890/sites/624052772388647595/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1&cache-version=2023-11-13 HTTP/1.1
Host: cdn5.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://awenbvhv32tt-106677.square.site
DNT: 1
Connection: keep-alive
Referer: https://awenbvhv32tt-106677.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
server: nginx
content-type: application/json
cache-control: no-cache, private
served-via: es
fullcache: m
x-revision: 3d2484938e55a0925f53ccb5ece6ab42e634c9e1
x-request-id: 1c42c671c6b981e8c29a3a79302bfd1c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Sun, 03 Dec 2023 02:39:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1622-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701571183.923991,VS0,VE252
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
199.34.228.39