r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 648bf42163c5d645d8a33cd0a9afebd0
9b9ac85435c4e90647e8379bca54c689058a8929
060757fb4857858d4d01a715824ea6771d0137e73a24bf75e2844d0f346380fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060757FB4857858D4D01A715824EA6771D0137E73A24BF75E2844D0F346380FA"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8021
Expires: Wed, 18 Jan 2023 09:03:43 GMT
Date: Wed, 18 Jan 2023 06:50:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7061
Expires: Wed, 18 Jan 2023 08:47:43 GMT
Date: Wed, 18 Jan 2023 06:50:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 06:34:22 GMT
content-type: application/json
age: 940
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6454
Expires: Wed, 18 Jan 2023 08:37:36 GMT
Date: Wed, 18 Jan 2023 06:50:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +5BVV9RHCRd16rqVtp4YjSc+a5IASpVv3mg3QQDZIXTVOCZtTH7wbwCLgHswH7qbnfCaqDCv1xo=
x-amz-request-id: 0R0XH1MQ0CQCXGA4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 06:45:18 GMT
age: 284
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 06:50:02 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash f7b5c333aa3c90a5fec70c9255690554
0041c628e50b9ed3d0e456fee7e66648ee3a805c
f92314370a5c817e0655eadfeb491b70f6c7564b387bfcebffd09be654a3db7c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "F92314370A5C817E0655EADFEB491B70F6C7564B387BFCEBFFD09BE654A3DB7C"
Last-Modified: Tue, 17 Jan 2023 22:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Wed, 18 Jan 2023 07:50:02 GMT
Date: Wed, 18 Jan 2023 06:50:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 06:17:25 GMT
age: 1957
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
myflashnet.square.site/
200 OK 9.0 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (20058)
Hash 1fdeb260939ad9195e3ad5efd86818da
e0c81a3a51b205cfc8ec72a35e64cdb6104270db
e8286ff02273c4722132bdf54b4f86ff8cbadf9877dc991810f87cf12850baff
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Wed, 18 Jan 2023 06:50:02 GMT
Set-Cookie: publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 06:50:02 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 06:50:02 GMT; Max-Age=1209600; path=/; samesite=lax
PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 06:50:02 GMT; Max-Age=1209600; path=/; httponly; samesite=lax
X-Host: blu63.sf2p.intern.weebly.net
X-Revision: e3d880af6ba55bf2db335a8ddd219d3c93a40327
X-Request-ID: 465ee8747708afb07b4b4a4f7ccd6e8e
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 8720730dce33d0026a1a354ac93d4a7d
ed5f086bc646a4d93d2344b19ff7821c96e44f7c
b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5126
Cache-Control: max-age=99733
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:50:02 GMT
Etag: "63c66529-1d7"
Expires: Thu, 19 Jan 2023 10:32:15 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
200 OK 5.0 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js
IP
File type ASCII text, with very long lines (11882), with no line terminators
Hash 20a4e66f534b80396d40bbc4291b2172
d7c962996f2715d94483be2bf9b644c7185d7ec7
0f19e8ad1c9bd5ae2ae5141f31b4e491bb460558da0ac51cd402964e716880ac
GET /app/checkout/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Mar 2022 18:09:33 GMT
x-rgw-object-type: Normal
etag: W/"40372ca3b0cfa19f4e5d664243108364"
x-amz-request-id: tx00000000000005ce1aaac-0062434bb9-a9f1ce7-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/js/system.min.edf02612a6bb463d71cb5efc5a4b495e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 716177
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 4734
x-timer: S1674024603.971960,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4998
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/2 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Wed, 04 Jan 2023 19:27:59 GMT
etag: "63b5d33f-124fe"
expires: Thu, 19 Jan 2023 08:38:42 GMT
cache-control: max-age=1209600
x-host: grn114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
age: 1116680
x-served-by: cache-sjc10061-SJC, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 12431
x-timer: S1674024603.971802,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25752
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
200 OK 23 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css
IP
File type Unicode text, UTF-8 text, with very long lines (64204), with no line terminators
Hash 5a08057dbd0b09fdcef375354aca0ada
3633aece56e4a03b6118cf199c40a4f4c6915faa
762c102d3386b3244effa9bfc21ef31dcb5d143732eb17041c0097c2d99f2b71
GET /app/checkout/assets/checkout/css/wcko.8af9a6a42eb51d862172.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Mon, 09 Jan 2023 17:22:21 GMT
x-rgw-object-type: Normal
etag: W/"651e92c6a8443e8f2e6ffaa794179cc0"
x-amz-request-id: tx00000000000005ad09296-0063bc4db0-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 704939
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024603.973263,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23362
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/runtime.71b53a5c370fe1b20b4e.js
200 OK 25 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/runtime.71b53a5c370fe1b20b4e.js
IP
File type ASCII text, with very long lines (51805)
Hash 4f643cd5ed0b808fd12a575b0bc6b834
2c6d56b5e2303c3460b819a513a14d1ae2b81925
b1ceb21822da793337a1df710c7096a343f4e9074df6e9bbdced6aa569d85f0b
GET /app/website/js/runtime.71b53a5c370fe1b20b4e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Jan 2023 19:35:51 GMT
x-rgw-object-type: Normal
etag: W/"ad7dc6f0ec3dd1167bfe24bfc398820f"
x-amz-request-id: tx00000000000006153e011-0063c6f90b-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/runtime.71b53a5c370fe1b20b4e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: aded06a217e0b555153108515a52dfe33ea2a019
x-request-id: b0b3dff6725d42864c8fbf48824826e7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 40249
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024603.976690,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25432
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
200 OK 24 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/site.973ddc22f8694b15d85e.css
IP
File type Unicode text, UTF-8 text, with very long lines (64921), with no line terminators
Hash 8c60406ea590dcf69b9449935dd2a3e9
0f5f05bb816318e9c296a5dfb0722d26d070a3fe
c491b43fcc54355cbad50b9e3f7669ffeca7be6fac1e833feb0a4b7aa9bcc82f
GET /app/website/css/site.973ddc22f8694b15d85e.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Fri, 06 Jan 2023 17:22:54 GMT
x-rgw-object-type: Normal
etag: W/"8b3c9559c02b85f1e4036133d13c07f7"
x-amz-request-id: tx000000000000058a1ba38-0063b8595a-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 21a345688c10c921dba7a437bb0211486ebff07d
x-request-id: d265bba703ee0368a2bf7d3826c11b81
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 998683
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024603.977837,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24139
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/vue-modules.aace135eb2091a49ba40.js
200 OK 72 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/vue-modules.aace135eb2091a49ba40.js
IP
File type Unicode text, UTF-8 text, with very long lines (27432)
Hash 1fe4b0db5fa9470a3a9735f1f2544722
160fee607818e1af342d54120589e9da6e982fad
d3877c618799d425009c75e4d3c93f51a369561f32753e3c4584cc1fb39ea591
GET /app/website/js/vue-modules.aace135eb2091a49ba40.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:57 GMT
x-rgw-object-type: Normal
etag: W/"9dd4fabbbd9bcbd5e2af08656958ce52"
x-amz-request-id: tx00000000000005f3ef3aa-0063c598b4-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/vue-modules.aace135eb2091a49ba40.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 4dbdfec03c758f695c3f5c945726352c421e7217
x-request-id: ec6c768ffc6787b0330955277b993741
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 130421
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1674024603.978575,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 72196
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/languages/en.0ed4e09d9f4a9f2604d7.js
200 OK 154 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/languages/en.0ed4e09d9f4a9f2604d7.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 154 kB (153574 bytes)
Hash e734024cc6b2113b1d3b6759fe720458
406424b4e0a39f113ffce35ce0ed656603564cb8
1e825903f6e9d70527f22040be4945e89566aed9c20f69ee1c13b83163ffefa6
GET /app/website/js/languages/en.0ed4e09d9f4a9f2604d7.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Jan 2023 19:35:51 GMT
x-rgw-object-type: Normal
etag: W/"e9583eb17692ca067f57d9ca3e9549e0"
x-amz-request-id: tx000000000000060194215-0063c6f912-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/languages/en.0ed4e09d9f4a9f2604d7.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: aded06a217e0b555153108515a52dfe33ea2a019
x-request-id: 0bfb9d84a4b62546dffc62839552318d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 40249
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024603.979987,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 153574
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.103b7ed38d6c66572111ef9f5a44a46d.js
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/imports.en.103b7ed38d6c66572111ef9f5a44a46d.js
IP
File type JSON data\012- , ASCII text, with very long lines (16859), with no line terminators
Hash 69fc82d0b0221185a6acac7464006647
c2f5e590d03eef2120c6c9f93b8d0562275ba848
6aba2e2beefb788071b219ebbf37ff1bd7ed43ffb7fe5b7c8930c79093c8b24c
GET /app/checkout/assets/checkout/imports.en.103b7ed38d6c66572111ef9f5a44a46d.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myflashnet.square.site/
Origin: https://myflashnet.square.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Jan 2023 15:37:23 GMT
x-rgw-object-type: Normal
etag: W/"103b7ed38d6c66572111ef9f5a44a46d"
x-amz-request-id: tx00000000000005fb2d726-0063c6c139-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/checkout/public/assets/checkout/imports.en.103b7ed38d6c66572111ef9f5a44a46d.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:03 GMT
via: 1.1 varnish
age: 54595
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024603.193468,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3591
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
200 OK 325 B URL HTTP/2 cdn3.editmysite.com/app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json
IP
File type JSON data\012- , ASCII text, with very long lines (1611), with no line terminators
Hash be5c6eec9cf3e92f8df759e392e01209
e0bff726136f738e6a1fe3e991d9a64dcf46d23a
e630015425b5298e0f7db7e397850913ea94d317beba50978a9df8e8364334ae
GET /app/checkout/assets/checkout/locale-imports-map.be14e50d1628faa410488f65362a397d.json HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myflashnet.square.site/
Origin: https://myflashnet.square.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json
last-modified: Wed, 04 Jan 2023 20:55:19 GMT
etag: W/"63b5e7b7-64b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:03 GMT
via: 1.1 varnish
age: 1148032
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024603.194665,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 325
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash 4823c00af0e55db6e2226946e5f74f4d
dacf937461616eb72e03b8bbbfba2ab28c8e93f0
94b93fffb0abb87fc73c40d83996111ca63f21fd9719d0fafa3f8cd3c7804407
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "9AE5B3FD5B20ECD8D0D678F57DF4004CBA7730A6"
Expires: Wed, 18 Jan 2023 18:00:00 GMT
Last-Modified: Wed, 18 Jan 2023 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b564e8fc11b500-OSL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
Hash 4823c00af0e55db6e2226946e5f74f4d
dacf937461616eb72e03b8bbbfba2ab28c8e93f0
94b93fffb0abb87fc73c40d83996111ca63f21fd9719d0fafa3f8cd3c7804407
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "9AE5B3FD5B20ECD8D0D678F57DF4004CBA7730A6"
Expires: Wed, 18 Jan 2023 18:00:00 GMT
Last-Modified: Wed, 18 Jan 2023 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b564e8f9dbb50c-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9fff448bd82ff8bf8205f0cc641dd884
1d363a6cb7d735b0485366dd81d15add352af42c
17a9c96319c3cfd36c217927981d8aa7beaa0328b17392aef9e44781b9215148
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=129720
Date: Wed, 18 Jan 2023 06:50:03 GMT
Etag: "63c6de23-1d7"
Expires: Thu, 19 Jan 2023 18:52:03 GMT
Last-Modified: Tue, 17 Jan 2023 17:42:59 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6Yt0F4dvw6lb2XkSsHnzVo5OmAzxExRb4dpxgcMi2sU2xmMJtkJbjg==
Age: 4144
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9fff448bd82ff8bf8205f0cc641dd884
1d363a6cb7d735b0485366dd81d15add352af42c
17a9c96319c3cfd36c217927981d8aa7beaa0328b17392aef9e44781b9215148
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130740
Date: Wed, 18 Jan 2023 06:50:03 GMT
Etag: "63c6de23-1d7"
Expires: Thu, 19 Jan 2023 19:09:03 GMT
Last-Modified: Tue, 17 Jan 2023 17:42:59 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: P1X66IfWc7wbOnrDQ9h8-9-4HPQvBRNidPjIiYUBI6FLmgsaa8uTqw==
Age: 5164
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://myflashnet.square.site/
Origin: https://myflashnet.square.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 06:50:03 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://myflashnet.square.site
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1988
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 06:50:03 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Thu, 18 Jan 2024 06:50:03 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://myflashnet.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
200 OK 2 B URL HTTP/1.1 sentry.io/api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/1263158/envelope/?sentry_key=13e49d785d8d4f828038b6136f3b48ba&sentry_version=7 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myflashnet.square.site/
Content-Type: text/plain;charset=UTF-8
Origin: https://myflashnet.square.site
Content-Length: 429
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 06:50:03 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://myflashnet.square.site
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
200 OK 894 B URL HTTP/1.1 myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig]
IP
File type JSON data\012- , ASCII text, with very long lines (894), with no line terminators
Hash b7b586847614a7b6f76c734046a6d74a
bc7909678ce63d3f186b024d19bd1fd9ace4476a
5ed0327eab6112e6981c501b952e547e92f959f75b9a6e853ea7480abba2d3c4
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getSquareStoreConfig] HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0=
Content-Length: 78
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024603.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:03 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu93.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 894
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10896
Expires: Wed, 18 Jan 2023 09:51:40 GMT
Date: Wed, 18 Jan 2023 06:50:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10896
Expires: Wed, 18 Jan 2023 09:51:40 GMT
Date: Wed, 18 Jan 2023 06:50:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26fa7bd40b5c3a3b5a6f95e7fca843b9
d8064f74f1e40bf6be4ea8ab4e319db22026c462
3e7744acf3e7ace6931c28cb5a5d3d7a77d9b97855b864c5c774368f2d0719c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd03bc60-bcfc-42c6-a1a0-0631c979fdd4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7361
x-amzn-requestid: 54e3621a-ec24-4d56-85bf-84239fa7811e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e23ZvGtnIAMFivg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5d2a4-7ce0e7924c03aeaa3ea684c3;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 22:41:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hamm4_4ud3QWXK2EeTcYUSN7ot6m-d-1z_NN29tSFYP25Itmz25jaA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 14:16:01 GMT
age: 59643
etag: "d8064f74f1e40bf6be4ea8ab4e319db22026c462"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: 93bbdd19-aa04-49ec-858f-9fa1d6b736d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6BKCGEtoAMFgsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c71573-008911af44c3998d7b27b837;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:38:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: adtKl3gOcesaXNHcRbi71-1Wz6caEgtXrAvbhB9qhId7eJEkd7d7pQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:59:45 GMT
age: 31819
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 318731dc24b5b47b96998e30e5ce27aa
86729555b4cf8d1f460ff74981b8b5a54a4bf9ea
acb7a93f815812cab50385796f6bcd7e16e96125422fb1415388a3b94767895e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F670ced8b-7c3c-440b-8ef8-ce104b85116d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10860
x-amzn-requestid: 808ed5a6-f0c3-40d9-a45f-aba1ffdf4ad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LSuEZcoAMFsyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf44-52c2a1756df73c8c1b9e041a;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Dek1Pngy_IqhWKhgiItX_XsYpqBTE7oyIkvPmYSIWafSnBoAt24Hlg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:11:25 GMT
age: 9519
etag: "86729555b4cf8d1f460ff74981b8b5a54a4bf9ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5caa7df39f82600c651046957ab6b62d
d6d6fbd676b74e487ee06248c48da87e178223e7
df3090d2e7c7c6e970fe498609d74c63e04aa80d55a26c956d1e3be5bebfafbc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11781
x-amzn-requestid: 87828f2e-2f9f-4ce4-b970-f8a8b1c115ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0uJnHaWIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f70a-437b0a0b415ebdba627f02df;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:04:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: e3XYQwwQJKvnSx03eDHKpUANMOc74hKWxT5XD5jouMV7XMxlmZS1bA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 07:21:44 GMT
age: 84500
etag: "d6d6fbd676b74e487ee06248c48da87e178223e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f491398239265c63ac162d47ab006ce6
c95e1bba76e910100e86f8abf789e5b5c1a2baa6
cdada2d9608e9d3f8e03cf9ced211550b6f7c8f7e0b5ee027a96f45af38523f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7741
x-amzn-requestid: 9af04340-5be9-42b0-96be-0264661c6dae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A6LEMtoAMFW_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c7150d-2348c8846249175e74efc226;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:37:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _7YOm38n8-T2LAL-cRA7R8KvEUBhXEM0dOXjOZ6HyPRNfMu6Z0Fh3g==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:17:05 GMT
age: 30779
etag: "c95e1bba76e910100e86f8abf789e5b5c1a2baa6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f112ea3865f38cbbcc8400b58320fa0
dacc584338546bf60f26b2a0bec48e9b584640dc
7feb3c0691f40354701d1cb0bf3c834d1eeead4a7297fac3afc0f4a7ca2c94cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8853
x-amzn-requestid: ff98ec33-294a-4a13-b064-3cd4744cd2b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LLKHPnIAMF0vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf14-233cbc6407c6b138144d7abb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:05:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QZZaGtGl3Z-4G4DxO4R_gjfDdQVgJc30Ur9EyLAvbGFhv4LfaXziPQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:00:29 GMT
age: 10175
etag: "dacc584338546bf60f26b2a0bec48e9b584640dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
myflashnet.square.site/uploads/b/17477ae0-9588-11ed-9bd5-4118dae6ed0e/icon_180x180_ios_MjUyMj.png?width=180
200 OK 1.1 kB URL HTTP/1.1 myflashnet.square.site/uploads/b/17477ae0-9588-11ed-9bd5-4118dae6ed0e/icon_180x180_ios_MjUyMj.png?width=180
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7c977994a0359a88fbafe6dade956664
c933c30731eb27aa76cf3ce0d4c96f7f7fe17730
991cc4fec6b891b99991fa8a95f47b8ade50a71fadbf05a9b38b8d43b4d3e67f
Analyzer Verdict Alert fortinet Phishing
GET /uploads/b/17477ae0-9588-11ed-9bd5-4118dae6ed0e/icon_180x180_ios_MjUyMj.png?width=180 HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024603.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 06:50:04 GMT
Content-Type: image/webp
Content-Length: 1142
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "NsxQczNgARgzTSpadgmiGyclmvsMpt1ifqPr7ex58sk"
Fastly-Io-Info: ifsz=2013 idim=180x180 ifmt=png ofsz=1142 odim=180x180 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000006022199e-0063c757e0-c6aed46-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: z0887
X-Storage-Object: 088783e6c62ab7a3d9966aafe67d35a60aef5b36b3edf3e31e21b5f74a3e793a
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10064-SJC, cache-pao17448-PAO
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1674024604.298027,VS0,VE12
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn132.sf2p.intern.weebly.net
myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
200 OK 201 B URL HTTP/1.1 myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bbf985fd86ef8add09a38860a98def2f
2804fa968da1e1b8be4b6f150438e45f4150d3c0
236153652c6f09415db4ee8f8b9a98827da5987a001a136d94d87f401ef6f160
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[ABTestSegmentation::getTestSegments] HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-XSRF-TOKEN: eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0=
Content-Length: 83
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024603.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:04 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn38.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 201
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
myflashnet.square.site/app/website/cms/api/v1/users/144470471/customers/coordinates
200 OK 70 B URL HTTP/1.1 myflashnet.square.site/app/website/cms/api/v1/users/144470471/customers/coordinates
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0202fec5c18173b1ccef517d7a8fb076
ed3c42952ab998b5f8f4570735caccb08bbbfbba
a496539bedf56d084f7654fb244367daf638da6ab09f7812b81c743baa995e26
Analyzer Verdict Alert fortinet Phishing
GET /app/website/cms/api/v1/users/144470471/customers/coordinates HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0=
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024603.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Wed, 18 Jan 2023 06:50:04 GMT
Set-Cookie: websitespring-xsrf=eyJpdiI6InZCOEJZVW9QcmQ4Zm9vUU5qa3JiYVE9PSIsInZhbHVlIjoiYW9sRFNFeHVUQTMvYTFyQnJhMjAvNXQzTi9WbVA3ejlhcmgzUTBHZTN5aUM0bWNXbkgvdlJnT0tDL1ZsOU9nV0VoQXFXK1ZUZmFxNXp6Zi9TV25WY1FUVGU4dUEzTGpNL0hLOGtScWp6YW91REQxcUVEZVFIVEtMYXhSbktnWloiLCJtYWMiOiI0MGU3ZjliNTYwMGQxNGM2YmE2N2FkMDE0ZTUyZDg3MTVjNGMwNmRjZjgyN2U3MzhhMTJhYjE2NTM2ODNjYjJkIiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 06:50:04 GMT; Max-Age=1209600; path=/; samesite=lax
XSRF-TOKEN=eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 06:50:04 GMT; Max-Age=1209600; path=/; samesite=lax
X-Host: blu56.sf2p.intern.weebly.net
X-Revision: e3d880af6ba55bf2db335a8ddd219d3c93a40327
X-Request-ID: 78b88b159628f40a05e102087854f126
Content-Encoding: gzip
cdn5.editmysite.com/app/store/api/v23/editor/users/144470471/sites/471490001658216133/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1
200 OK 1.4 kB URL HTTP/2 cdn5.editmysite.com/app/store/api/v23/editor/users/144470471/sites/471490001658216133/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1
IP
File type JSON data\012- , ASCII text, with very long lines (3815), with no line terminators
Hash 119306a5c79bbd383581e3816fba41b4
5987adb57e9f10957993905d2afc33072098e501
3f5bc34356b92799ce997fc56b326d274997a62b0a55ae2bf5dc33bb8564d1bb
GET /app/store/api/v23/editor/users/144470471/sites/471490001658216133/store-locations?page=1&per_page=100&include=address,free_fulfillment_conditions&lang=en&from=latlng:59.955,10.859&sort_by=distance&valid=1 HTTP/1.1
Host: cdn5.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/json
cache-control: s-maxage=604800
etag: W/"8ac698db4c4cac9a2e6a2d32848b2b38"
access-control-allow-methods: GET, HEAD
fullcache: m
x-revision: a3e9c32670a5a702157cbf9146eec7d303fd074c
x-request-id: 9b20b1a42847cd8680ef0ca7e17e2338
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1675-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674024604.486516,VS0,VE301
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1368
X-Firefox-Spdy: h2
myflashnet.square.site/square.ico
200 OK 6.5 kB URL HTTP/1.1 myflashnet.square.site/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /square.ico HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlNVYzdEaStlM2Y0eHQ1dFFkcTZlY0E9PSIsInZhbHVlIjoiRVI0WjNZclBoaURWV0ZBWmZUd1RxbnlxY2ZuaHV1bHFBSEZSdXgwR0pUMHZMSVBpdXh6Vk9mQVFaUU1FcFdwUVU3VzRiNkZnRXdtKzE0d0dhNUNjcEg4d2JidVQzclNWblVKWDFlRlA5NGlXSEJVRlVFK3ppbWppZ0tRelg3Y1UiLCJtYWMiOiIzNDhjZjYwYzUwODQyYmFiNGRlODY3NmIyYmM2ZmIwYzM5NTVhMTcxZjA4Y2Q5NWQxODMyOWZlMTE3MjEyMTZjIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024603.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 06:50:04 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001af9993-00628473f6-b9fbc29-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: blu56.sf2p.intern.weebly.net
X-Revision: e3d880af6ba55bf2db335a8ddd219d3c93a40327
X-Request-ID: 897ad66d2e44b1b48bd04f2bdf5b4c90
cdn3.editmysite.com/app/website/static/fonts/Square%20Market/Square%20Market.css
200 OK 393 B URL HTTP/2 cdn3.editmysite.com/app/website/static/fonts/Square%20Market/Square%20Market.css
IP
Hash f0935782737336d7aedae7e9534d27be
34b49a0ffcd13e03ca2d1303d5a71773e2282362
728ed2ef57525be9b9a8541ffe47f7600ba08e3ce0646afce5b49736692f7745
GET /app/website/static/fonts/Square%20Market/Square%20Market.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Tue, 17 Sep 2019 17:09:50 GMT
x-rgw-object-type: Normal
etag: W/"a7ddbe9e253a4f3a9c6de33cf4f3ce60"
x-amz-request-id: tx00000000000000b7d07bc-00626682c3-4d6022f-las
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: dac0242964acdc08ef6cc16c666026a58a1e15a5
x-request-id: 118bb1c1a071abd6cc161598c41b7f5d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 92674
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.919915,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 393
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/6054.0f9cb408b2159b5b9233.js
200 OK 6.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/6054.0f9cb408b2159b5b9233.js
IP
File type ASCII text, with very long lines (11054)
Hash 82972253d3cc556aa4170323457b4c7b
f9c2c459a0cacf06beb31b22f03ada3f1abe35f1
909fbe6339aec4e352e01de88c9a3efa190d622f87065ada98ebfd18babc0e82
GET /app/website/js/6054.0f9cb408b2159b5b9233.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"71e9f30021834d689a879ad15e69b3e3"
x-amz-request-id: tx00000000000005f065218-0063c598b3-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/6054.0f9cb408b2159b5b9233.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: a69f25f176a92c76f95115f570131e75
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.934011,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6033
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/45011.5f0741840aef280bebe4.js
200 OK 3.9 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/45011.5f0741840aef280bebe4.js
IP
File type ASCII text, with very long lines (10134)
Hash d66a2c92ce64ac0f4a9bf76448051ffa
01a69f5aa1a9a7ff8f5c7747f331b0ae8eeae114
b779fb87eb8f309c7c8ff24e5f77f9c47756593c6e29af0cbca2c8a985fb9a4e
GET /app/website/js/45011.5f0741840aef280bebe4.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"10aa855ec58c80238f70fb61f09e01f1"
x-amz-request-id: tx00000000000005f3ef4a3-0063c598b5-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/45011.5f0741840aef280bebe4.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 2d0b5506d14190ee8123995524b4093d
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.936785,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3900
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/69361.a1448ceebfd6e26c1aad.js
200 OK 6.5 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/69361.a1448ceebfd6e26c1aad.js
IP
File type ASCII text, with very long lines (5937)
Hash cee4b745a3c1fd3efe1fee0da9eec74c
bccdea4daacc51258743eabf73da2469ca4e9f1b
915b72e4fe33034dc57f4930052faa8d9c34662af5def8aee504d28822ac297f
GET /app/website/js/69361.a1448ceebfd6e26c1aad.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"a059357fbad23542f88502c6b1cdd7d1"
x-amz-request-id: tx00000000000006078f223-0063c598b6-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/69361.a1448ceebfd6e26c1aad.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: bd2f6893c29d310adbd4a8155eaa80ee
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.937546,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6518
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/navigation-mobile.b411bc328442085812dd.css
200 OK 5.4 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/navigation-mobile.b411bc328442085812dd.css
IP
File type Unicode text, UTF-8 text, with very long lines (20612), with no line terminators
Hash 537a225572de90ab640e7dc4160d813c
ab17f8383d34dbde49012fc827ad18d6a27cdbee
ee3d656e675dfe2552e03ca22eb9a07cc815c7faaf3d1aecd236e53f1353737b
GET /app/website/css/navigation-mobile.b411bc328442085812dd.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 19:23:07 GMT
x-rgw-object-type: Normal
etag: W/"296db0a213ed88ca36f49b3a3d90fd03"
x-amz-request-id: tx000000000000057f3342d-0063b723f8-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 14c498fe42d5a7a860774be944b1e53ef40b1e42
x-request-id: 3de6ac5af92182173d5731712f3b46b0
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 1077903
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.943584,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5444
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/navigation-mobile.c200b661a6a32243bf4e.js
200 OK 12 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/navigation-mobile.c200b661a6a32243bf4e.js
IP
File type ASCII text, with very long lines (15497)
Hash d1d6641e040ae9ad4efa47752b8743b9
ad37de6d89494a2fc3bcfea45f7f0b1d699b470b
982cea2cfb062ad40ebbf9470dbd9ecdbef7ecd4253c967158f894b7fce7c24f
GET /app/website/js/navigation-mobile.c200b661a6a32243bf4e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:55 GMT
x-rgw-object-type: Normal
etag: W/"52f671de5e7b799d30b5ccfa58b178bd"
x-amz-request-id: tx0000000000000604173d1-0063c598b5-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/navigation-mobile.c200b661a6a32243bf4e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f1533934870cf5b0f406b1ab0e5cf8c354dd28a4
x-request-id: ac75ae920a74fdcd48a8b6bf6f2eb934
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 104620
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1674024605.946509,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12352
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/32467.66330e9902e75a53263f.js
200 OK 4.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/32467.66330e9902e75a53263f.js
IP
File type ASCII text, with very long lines (14754)
Hash 94f40c6214f3f20dd3cc6f86d3ebca48
1f882efa3ae5030307968b5a3411160116ce12db
95789c21dd2a0896cba2e7cf9972505cd67ceee6633f3564bda0f2f45bf81830
GET /app/website/js/32467.66330e9902e75a53263f.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"1f854c95c3d9f259ea3deb6c2aadb2f3"
x-amz-request-id: tx0000000000000604173d0-0063c598b5-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/32467.66330e9902e75a53263f.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 189c013ced3f24ec9f9be15071f84f56
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.948463,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4638
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/75772.16a2725b4073664b8aef.css
200 OK 5.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/75772.16a2725b4073664b8aef.css
IP
File type Unicode text, UTF-8 text, with very long lines (21252), with no line terminators
Hash 107e1989ef1c598bf5f52eb2ee36d678
6dd23b020a3ee62e9ef40097792f3b92d44faccc
3900ad9874eb48fcc672f0da7601dc6d83594cb9ddd522ea8fd43ec3cad7bdbd
GET /app/website/css/75772.16a2725b4073664b8aef.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 16:44:43 GMT
x-rgw-object-type: Normal
etag: W/"ab6f3c44ed2c2ec4b531d400dfb37522"
x-amz-request-id: tx00000000000006078efaf-0063c598b3-c695612-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 1931a2ee1dd621442d4aeaa4d5a0ccd7
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.951022,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5340
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/75772.fe7fdc8e9c9edb85b94e.js
200 OK 5.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/75772.fe7fdc8e9c9edb85b94e.js
IP
File type ASCII text, with very long lines (13480)
Hash 62f456fc443ce951304fb4359e9f5752
34cbb9fd507ca4aa5d5af6ad6f7845d2d5307035
9d5407b99ce7fb3d1a6d084fec603a1ad84e3537ea395d449c1fb2b8dd209e11
GET /app/website/js/75772.fe7fdc8e9c9edb85b94e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:52 GMT
x-rgw-object-type: Normal
etag: W/"f3c789b093648128c70c514a2a34fb7c"
x-amz-request-id: tx00000000000006008b987-0063c598b4-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/75772.fe7fdc8e9c9edb85b94e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 516a047d8918d99380dfe2ee37cdda5a
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.958149,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5591
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/42760.d87b74e882c52cba55b1.js
200 OK 5.4 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/42760.d87b74e882c52cba55b1.js
IP
File type ASCII text, with very long lines (14051)
Hash ebb4cf1e2ed61f5e222209572667dea7
6a3fc76a3506295e28d8b1f6b2c58136a1995f68
af3a66bbdcb92dac00ebe681343d8389efc0001e4ab893bd96be0f1ec804a85f
GET /app/website/js/42760.d87b74e882c52cba55b1.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"20e35b14a0f2b023a86689de64f02cb8"
x-amz-request-id: tx00000000000006041746f-0063c598b6-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/42760.d87b74e882c52cba55b1.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 9ddd5f06f769ff0f9ab1f30c5e307446
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.960902,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5420
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/8115.6ddf3dda635905f34406.js
200 OK 18 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/8115.6ddf3dda635905f34406.js
IP
File type ASCII text, with very long lines (44732)
Hash 9dc3f68c63132a444e2a1d4bc7d23b14
35fae8f879b84f35c68ca8aaeebbb1b1d7007cc6
08c4c6a4be39215ba6fe4eb4bc44dbbbf91d7256d23f0e47f1f95c6a093d436d
GET /app/website/js/8115.6ddf3dda635905f34406.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"f9935ec007046a9f0b9f7d33c27948ab"
x-amz-request-id: tx00000000000006078f2e2-0063c598b7-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/8115.6ddf3dda635905f34406.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: f559f2662cb9dd44b36f665df3fb2ca3
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.967254,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18226
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/34762.7ca7fbe7aba94a70ab12.js
200 OK 3.4 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/34762.7ca7fbe7aba94a70ab12.js
IP
File type ASCII text, with very long lines (3721)
Hash 18c4dad9cf6605c6d70cd7ae2ed32162
3763ffc77689100efffea283f1ac9079c273e3c8
d15aff87c270347735b89962c23083b15fb6fc3fff48563f1139a2bf8a276159
GET /app/website/js/34762.7ca7fbe7aba94a70ab12.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"abc71f65021594edc25eda8d9dd1cbff"
x-amz-request-id: tx00000000000006004c371-0063c598be-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/34762.7ca7fbe7aba94a70ab12.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: b2feef29b129565b44a383ab5ef27b77
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.967748,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3360
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/80395.5b404632d9e3e1f438e1.js
200 OK 4.5 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/80395.5b404632d9e3e1f438e1.js
IP
File type ASCII text, with very long lines (7616)
Hash f50dc49833d45dbb327759068efb37cf
ba6677cbd3aca3f1155845f537ec9a0f7d9f3d38
5b5d006b7414bcdbd76b9060ac1256f2b46c631e23fe627f04b6d328aa796c29
GET /app/website/js/80395.5b404632d9e3e1f438e1.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:52 GMT
x-rgw-object-type: Normal
etag: W/"16420c1b38ce1eecc13c6ca08e21a997"
x-amz-request-id: tx00000000000005f3ef53f-0063c598b6-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/80395.5b404632d9e3e1f438e1.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 9127212b1f2ff57a46deeb622e55262e
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.970866,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4517
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/cart-1.19dc0471e10ee57eead9.css
200 OK 7.2 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/cart-1.19dc0471e10ee57eead9.css
IP
File type Unicode text, UTF-8 text, with very long lines (26565), with no line terminators
Hash fb85756c206cd81b43d386d2f77039c0
ba2961e30eb2b8735793b6eb7f6bc13e7d2c39d1
d2edd81704ae5d129dc65e170d26d31852d5f56580cef5ae647dcf801bf596ed
GET /app/website/css/cart-1.19dc0471e10ee57eead9.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 19:23:07 GMT
x-rgw-object-type: Normal
etag: W/"a57f121715e99c86aa4c2661e954bbd8"
x-amz-request-id: tx00000000000005afd7b0a-0063bccae2-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b98ac0255e2565feb34a06ba4ed599214657d91
x-request-id: 746b515a7de8a1cbe7b8ba7b4de4f0b3
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 707515
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.971721,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7202
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/cart-1.a4f267b14c75a1e8ba5e.js
200 OK 35 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/cart-1.a4f267b14c75a1e8ba5e.js
IP
File type ASCII text, with very long lines (13180)
Hash 4ce45632ffde0d7220bb51dddf7bda0d
8872a2ff9706663de37f80154d2d1ad3f6bc33ac
cb8f26d719c1a3e5cb0d70963e3188ee0793ccdb5c61f7088a3f3f9b556b20e5
GET /app/website/js/cart-1.a4f267b14c75a1e8ba5e.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:53 GMT
x-rgw-object-type: Normal
etag: W/"ff8ec70d8a0ced0653551007a4de2a34"
x-amz-request-id: tx00000000000006078f1fb-0063c598b6-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/cart-1.a4f267b14c75a1e8ba5e.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 42ee16f65c1114619ed693fb2e74a936
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:04 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.972598,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34670
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/37470.a25b845ddc3441520774.js
200 OK 8.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/37470.a25b845ddc3441520774.js
IP
File type ASCII text, with very long lines (21159)
Hash 21a05fcecab605d796cdc2c5411c74dc
3236cf7a57dd734be81f0d228dd9cf0f900e3e89
82fc331c43b0717df778d1179ec2a6bd920da1159e5d58ca23caf3aa62f9f0a7
GET /app/website/js/37470.a25b845ddc3441520774.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"ecf3bad0968dd744c38b77df2fcdfedb"
x-amz-request-id: tx00000000000005f3ef5ec-0063c598b6-c67eadd-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/37470.a25b845ddc3441520774.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 47ba595eac58c11bc68ec3ae614b72d6
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.001795,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8600
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/56803.f95331688b61248a63cc.js
200 OK 8.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/56803.f95331688b61248a63cc.js
IP
File type ASCII text, with very long lines (17942)
Hash 13212cbcfa5a4b93ae441ff07c65083b
58f3463a35fe00d268d87fd96ac5983444552a3c
9d84c45a67cab4200c75eb8027b6be824018d7ce553ce03fb5df1eb8defba1aa
GET /app/website/js/56803.f95331688b61248a63cc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"46f08e2ada0bf7ed133704e91760022d"
x-amz-request-id: tx00000000000005f0657ba-0063c598b9-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/56803.f95331688b61248a63cc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: d8a85c14aa2691b62a203d3f0f4a7bf0
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.002216,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7982
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/header-4.63be6e7292fb5121c741.css
200 OK 6.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/header-4.63be6e7292fb5121c741.css
IP
File type Unicode text, UTF-8 text, with very long lines (23937), with no line terminators
Hash 6b5428a706221ccc77e76414779345be
cecef60b2d510eecd84537e59b647d20f90b4fe9
1cba7fcd1d4f8cb276df2a67a0291ebdf819bd8ae4ae2599fba45cbd805d27c0
GET /app/website/css/header-4.63be6e7292fb5121c741.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 19:23:07 GMT
x-rgw-object-type: Normal
etag: W/"ac326993cc6fc670ed227f75c9432287"
x-amz-request-id: tx0000000000000603b61cf-0063c590c4-c669cc6-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: f1533934870cf5b0f406b1ab0e5cf8c354dd28a4
x-request-id: 8079862d43a71037956d6cfc67aca0ff
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 112344
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.002393,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6260
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/header-4.e5187d68f02c3d542127.js
200 OK 31 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/header-4.e5187d68f02c3d542127.js
IP
File type ASCII text, with very long lines (14179)
Hash 7c4b898173f1e69ecc5b74147ace84a0
7aa7c27e3776e8a42ddae24959e30a8e73fc5b4a
aa791be8813bc8ecf9b71d72c1574a318d092de182d3d986c747437a49f6c296
GET /app/website/js/header-4.e5187d68f02c3d542127.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:54 GMT
x-rgw-object-type: Normal
etag: W/"55b042aa6c89f2d636ad1c28b06468df"
x-amz-request-id: tx00000000000006078fa78-0063c598c0-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/header-4.e5187d68f02c3d542127.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 5d36c4ae491d7c887baa4a3fb5edfd53
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130342
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.015015,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 31022
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2428
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 06:50:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Thu, 18 Jan 2024 06:50:04 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://myflashnet.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/87697.ebe6377d4fd423504141.js
200 OK 1.8 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/87697.ebe6377d4fd423504141.js
IP
File type ASCII text, with very long lines (4123)
Hash c0f5856bba0a5c3f6b675e8a36d6d62c
4ae6c1ce27b549d02acc87a14deaa167e0ef60ac
535d0d02650de2fc01c291cfc2f3496150789dafc16e67f8d878731ea1185bb4
GET /app/website/js/87697.ebe6377d4fd423504141.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:52 GMT
x-rgw-object-type: Normal
etag: W/"2eacb82af5d6f9d85573e94925b65602"
x-amz-request-id: tx00000000000006008ba14-0063c598b4-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/87697.ebe6377d4fd423504141.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 6de3a4769e9c6c5faed0f2be1caf49ab
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.100018,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1813
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/95169.86d09a48327a9f79cadc.css
200 OK 4.4 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/95169.86d09a48327a9f79cadc.css
IP
File type Unicode text, UTF-8 text, with very long lines (18854), with no line terminators
Hash 00c396a4ca57a5cdca2806cee35e68bd
3ea61c26b44847a3c0beb14c09764edec2ee34bf
0998053190aac5499c888a97ec16fa6a3bcf2ee3636025c478a53145f002de09
GET /app/website/css/95169.86d09a48327a9f79cadc.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 16:44:43 GMT
x-rgw-object-type: Normal
etag: W/"f60754c4f1ecbbda9a08673ad8cf4d81"
x-amz-request-id: tx00000000000006004bc00-0063c598b5-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: c1fb7b2974316fb91f35d9367a173873
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.101378,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4369
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/95169.f68fca080430465e05d2.js
200 OK 10 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/95169.f68fca080430465e05d2.js
IP
File type ASCII text, with very long lines (12277)
Hash a009c291adb6d5392d47ab6a61beadf3
0d34c77886888e5bbf2eb665f65d5cee25e0397c
a7a627bebe009ea4e5652f6b345109ff48bbf20b236a39d0b424586b1d66edd2
GET /app/website/js/95169.f68fca080430465e05d2.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:52 GMT
x-rgw-object-type: Normal
etag: W/"b7b9b43477c998294418618477c21962"
x-amz-request-id: tx00000000000005f065bbc-0063c598be-c6aed46-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/95169.f68fca080430465e05d2.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 37affc911f7cab9d3e9711da6b407277
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1674024605.103598,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10084
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/20349.661f800a7d96daa40a96.js
200 OK 13 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/20349.661f800a7d96daa40a96.js
IP
File type ASCII text, with very long lines (14369)
Hash fbec77a038b8de313835d654094bb7b8
94963835338c6246f400b378d48a85be588015a8
bc25ece3344e517f16bd15297d4bb2c3a9a1a348dc79acd24567fca9f112b9bd
GET /app/website/js/20349.661f800a7d96daa40a96.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:50 GMT
x-rgw-object-type: Normal
etag: W/"98318ac89d65b7a9780cb7404866c87a"
x-amz-request-id: tx00000000000006008be8f-0063c598b9-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/20349.661f800a7d96daa40a96.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 6cfc105ab6ba5a77c3ab5f38f85b5541
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.106698,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12937
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/47354.3b37c0c3a2939830041a.js
200 OK 6.0 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/47354.3b37c0c3a2939830041a.js
IP
File type ASCII text, with very long lines (6073)
Hash 3e7b4740d6fe9daaccc5a1778c3ec36c
eb6ea710726d0a0e995aaabf355440ed0f9a4f80
dc37970abb95836bfb4095249f9411e2b4d5586860ba9196f934ecd0a07a0d44
GET /app/website/js/47354.3b37c0c3a2939830041a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"ed9b2afc24f3c8ab0f18c666fe2e2b39"
x-amz-request-id: tx00000000000006078f91d-0063c598bf-c695612-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/47354.3b37c0c3a2939830041a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 00568e3194b253a4c73ea1bcd36a137c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130415
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.107927,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6001
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/contact-us-1.5d328cf2df0fd039ff4b.css
200 OK 1.7 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/contact-us-1.5d328cf2df0fd039ff4b.css
IP
File type ASCII text, with very long lines (5436), with no line terminators
Hash 3cd007ca346955ac0cba245458d27fb5
f5be00f74f36e2505a9217a70ffa58dddfb2294f
79c6922ca7e2ccf7968b3df8df9307da91ed8f73e0f33eb4743f862d39b344c4
GET /app/website/css/contact-us-1.5d328cf2df0fd039ff4b.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 01 Dec 2022 17:05:38 GMT
x-rgw-object-type: Normal
etag: W/"294b38fa4e234ab8a0094f0c9b417538"
x-amz-request-id: tx00000000000003da2d349-006388df50-c6aed46-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b98ac0255e2565feb34a06ba4ed599214657d91
x-request-id: becfe0e4db9703c96a455dc2339c357c
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 715774
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.109136,VS0,VE4
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1736
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/contact-us-1.088edd628551b14386cc.js
200 OK 792 B URL HTTP/2 cdn3.editmysite.com/app/website/js/contact-us-1.088edd628551b14386cc.js
IP
File type ASCII text, with very long lines (1639)
Hash 7aeb22ebeca0396827ed711fd1bbda66
7e8d196e9c38ba7b7f28a5a53f9addc5e47cf029
1a071bbe7323d715a9e00664b4fe113e2239dfdc8d286b964e00ae19e0f54d3d
GET /app/website/js/contact-us-1.088edd628551b14386cc.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:53 GMT
x-rgw-object-type: Normal
etag: W/"caf2a265c07062ead6dcd646f95a28f4"
x-amz-request-id: tx00000000000006008c9a1-0063c598c7-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/contact-us-1.088edd628551b14386cc.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: e5ffbe83578ded72d273a147282e3a33
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 129850
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.110994,VS0,VE3
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 792
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/75260.e2167bdb7fc4e1e3d2b2.js
200 OK 12 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/75260.e2167bdb7fc4e1e3d2b2.js
IP
File type ASCII text, with very long lines (12129)
Hash 27c4bce066990cc381a7084eb5ce660b
c39d65f19002a4ec8ba48b0b48ba2aae7f2ac8ca
403aee12eac13488643b0eb82c2d68fa61b621145f7b6a0e2b70fda2c91c583f
GET /app/website/js/75260.e2167bdb7fc4e1e3d2b2.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:51 GMT
x-rgw-object-type: Normal
etag: W/"7f118391141974494d80a3b002684f3f"
x-amz-request-id: tx00000000000006041748b-0063c598b6-c669cc6-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/75260.e2167bdb7fc4e1e3d2b2.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 077869c12e4481521b39d60d1c95bd69
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130416
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.123091,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11740
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/footer-7.fe0e7215100f4b62e867.css
200 OK 3.6 kB URL HTTP/2 cdn3.editmysite.com/app/website/css/footer-7.fe0e7215100f4b62e867.css
IP
File type ASCII text, with very long lines (12671), with no line terminators
Hash 92b2638f7e1663c518153600973601cb
23c290e965ca67e9e0c38c5560b275b44b9eed8b
c609ce3cec8a17b2523d60e1dc6db408ce55e8c3e9ad43c2359766a02a960c46
GET /app/website/css/footer-7.fe0e7215100f4b62e867.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 19:23:07 GMT
x-rgw-object-type: Normal
etag: W/"be087710d8d5db88df05014d8ccb2995"
x-amz-request-id: tx000000000000057c4fb93-0063b723f7-c699baa-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b98ac0255e2565feb34a06ba4ed599214657d91
x-request-id: 74e771a075d040a4f97cbabf4dd403ae
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 709672
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1674024605.128610,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3583
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/site.9e0f5e7462e9211b5cbf.js
200 OK 1.3 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/site.9e0f5e7462e9211b5cbf.js
IP
File type ASCII text, with very long lines (4863)
Hash 1f461d1693d26f2d559fdc4e886d41ec
2c7d1106b7c436aebcb72c6556421819be652480
be5862556afdd9292ca4b73b7a396816c41cd9abedb8490ba9b9140a6a39f8ea
GET /app/website/js/site.9e0f5e7462e9211b5cbf.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 17 Jan 2023 20:48:16 GMT
x-rgw-object-type: Normal
etag: W/"3745659251baa9bbb8c9b553d97f66f5"
x-amz-request-id: tx000000000000060f0d618-0063c709e9-c696eea-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/site.9e0f5e7462e9211b5cbf.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 4b61f94edbdfc3242a4cf992c655123c2e4378eb
x-request-id: d9c0946b3a6022de084fce889311110b
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:02 GMT
via: 1.1 varnish
age: 35890
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024603.978204,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 642839
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
200 OK 351 B URL HTTP/2 cdn3.editmysite.com/app/website/css/free-footer.86d148e5cb2be7f08d49.css
IP
File type ASCII text, with very long lines (626), with no line terminators
Hash ee20922f55875dd45d7acae546cadedc
491672dcd84153d29c9e2346e0f78d1fef5e729d
6594eb11c5c147a510920933dbd3177b6678ce61f0bdc38a6377761534792336
GET /app/website/css/free-footer.86d148e5cb2be7f08d49.css HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css; charset=utf-8
last-modified: Thu, 14 Jul 2022 19:54:09 GMT
x-rgw-object-type: Normal
etag: W/"607e0fd2b514ffdc06c62b1eb1bc428b"
x-amz-request-id: tx00000000000005ade59b5-0063bc962b-c696eea-sfo1
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 2b98ac0255e2565feb34a06ba4ed599214657d91
x-request-id: 9449735b6f4110aa66c8201596855f25
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 721009
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.237570,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 351
X-Firefox-Spdy: h2
cdn3.editmysite.com/app/website/js/free-footer.ddd26683d6b78473855a.js
200 OK 3.2 kB URL HTTP/2 cdn3.editmysite.com/app/website/js/free-footer.ddd26683d6b78473855a.js
IP
File type ASCII text, with very long lines (7489)
Hash 1fceeadb34b5cd92910b12387a560c29
f3d1030eb70643cb30406ee268bfa46befefd3e9
140f3332363211c7b82b6467954106b104659be51baa2d286b4a3fa9b511ce27
GET /app/website/js/free-footer.ddd26683d6b78473855a.js HTTP/1.1
Host: cdn3.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 16 Jan 2023 18:32:54 GMT
x-rgw-object-type: Normal
etag: W/"757d45e938625b7c2c1dbec3020a852d"
x-amz-request-id: tx00000000000006004c527-0063c598c0-c699baa-sfo1
sourcemap: https://private-assets.weebly.net/uploads/c/00e8dbc9-8879-11e9-9040-089e018b1a8c/website/public/js/free-footer.ddd26683d6b78473855a.js.map
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-revision: 0b940add0d910c2f95f6bb02c584e87776b36771
x-request-id: 49622bc83e3352073cfd8273b4976d20
content-encoding: gzip
x-w-dc: SFO
accept-ranges: bytes
date: Wed, 18 Jan 2023 06:50:05 GMT
via: 1.1 varnish
age: 130415
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674024605.239165,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3234
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash da62ef403fb24c0172c9056e74d8e726
72df0e2a9a988345880ce05c89159a9a49159c30
82683e89e946143c3a40e4945362635ff310d479e9a479bb71bd05e4704cbbfc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5654
Cache-Control: max-age=94844
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 06:50:05 GMT
Etag: "63c65003-1d7"
Expires: Thu, 19 Jan 2023 09:10:49 GMT
Last-Modified: Tue, 17 Jan 2023 07:36:35 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1886
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 06:50:05 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=f0bca798-7201-43a3-93d7-b31b13a96a7c; Expires=Thu, 18 Jan 2024 06:50:05 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://myflashnet.square.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
200 OK 182 B URL HTTP/1.1 myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f6b6b81dd3714cd388808342e960a10
f34bc92a2c7a4dfe56bd6f069ad601e6a61e3b61
2eb22bb7b96aaee11236fcf99e822ede29d3a2ddf2d6f019bb70005b5a1540ef
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::getCurrentOrder] HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0=
Content-Length: 89
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024605.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490; websitespring-xsrf=eyJpdiI6InZCOEJZVW9QcmQ4Zm9vUU5qa3JiYVE9PSIsInZhbHVlIjoiYW9sRFNFeHVUQTMvYTFyQnJhMjAvNXQzTi9WbVA3ejlhcmgzUTBHZTN5aUM0bWNXbkgvdlJnT0tDL1ZsOU9nV0VoQXFXK1ZUZmFxNXp6Zi9TV25WY1FUVGU4dUEzTGpNL0hLOGtScWp6YW91REQxcUVEZVFIVEtMYXhSbktnWloiLCJtYWMiOiI0MGU3ZjliNTYwMGQxNGM2YmE2N2FkMDE0ZTUyZDg3MTVjNGMwNmRjZjgyN2U3MzhhMTJhYjE2NTM2ODNjYjJkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:05 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu70.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 182
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=a47c9276-b6b2-4c22-8bde-c169f2d1893c&batch_time=1674024605230
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=a47c9276-b6b2-4c22-8bde-c169f2d1893c&batch_time=1674024605230
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8760342756afc8c855590f6e82c21709
acaa3f444ef9f1dd22bbdcae1c10efd6c669b13a
b9b83dde982ec44b11a44025a772cef77c72f28e380b031dc36b0d912f53e6c0
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=a47c9276-b6b2-4c22-8bde-c169f2d1893c&batch_time=1674024605230 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16129
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Wed, 18 Jan 2023 06:50:05 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ce8d852b-931a-4c1f-bde1-adcb54e04a61&batch_time=1674024604976
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ce8d852b-931a-4c1f-bde1-adcb54e04a61&batch_time=1674024604976
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 091d7094f5077990e1a6480530617cdf
4c5d8b96057c3ebdfe63dddfc9e1828d8aec15db
b0dae698e16796c3b0647ed9139c21d12bfb7b84bdd7d616434372b355f76dad
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.21.2%2Cenv%3Aproduction%2Cservice%3Asquare-online-buyer-journey%2Cversion%3Aprime-e3d880a&dd-api-key=pubc0f9d721a4f01e74b0453dd99e44a542&dd-evp-origin-version=4.21.2&dd-evp-origin=browser&dd-request-id=ce8d852b-931a-4c1f-bde1-adcb54e04a61&batch_time=1674024604976 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16224
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Wed, 18 Jan 2023 06:50:05 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
200 OK 79 B URL HTTP/1.1 myflashnet.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 26e70d9925604cbe0c7e866fc54d87f4
ef5b3fb91cf2534cbf57806d14b21f0a5ae5c259
c0e7b562566962eced45cdf3319b692c55f3df7c3c6d39436a9d21bae2d2e049
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable] HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Client-Application-Name: website
X-XSRF-TOKEN: eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0=
Content-Length: 77
Origin: https://myflashnet.square.site
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024605.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490; websitespring-xsrf=eyJpdiI6InZCOEJZVW9QcmQ4Zm9vUU5qa3JiYVE9PSIsInZhbHVlIjoiYW9sRFNFeHVUQTMvYTFyQnJhMjAvNXQzTi9WbVA3ejlhcmgzUTBHZTN5aUM0bWNXbkgvdlJnT0tDL1ZsOU9nV0VoQXFXK1ZUZmFxNXp6Zi9TV25WY1FUVGU4dUEzTGpNL0hLOGtScWp6YW91REQxcUVEZVFIVEtMYXhSbktnWloiLCJtYWMiOiI0MGU3ZjliNTYwMGQxNGM2YmE2N2FkMDE0ZTUyZDg3MTVjNGMwNmRjZjgyN2U3MzhhMTJhYjE2NTM2ODNjYjJkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 06:50:05 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn118.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 79
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: application/json
myflashnet.square.site/uploads/b/a010b8c25863c135c4db2cb7539f2342d8b05a14c07893465470bcccd08a8d79/atttt_1673864853.png?width=400
200 OK 3.8 kB URL HTTP/1.1 myflashnet.square.site/uploads/b/a010b8c25863c135c4db2cb7539f2342d8b05a14c07893465470bcccd08a8d79/atttt_1673864853.png?width=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 41fcd3c27b2ed287146073a66d280927
e2f234636813a8249ead1f88d698388fc5d409de
a2e3a16abf4ea6bc49d5f2b59296fbbc786c619fdc05c71357d7a312d35e33ff
Analyzer Verdict Alert fortinet Phishing
GET /uploads/b/a010b8c25863c135c4db2cb7539f2342d8b05a14c07893465470bcccd08a8d79/atttt_1673864853.png?width=400 HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024605.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490; websitespring-xsrf=eyJpdiI6InZCOEJZVW9QcmQ4Zm9vUU5qa3JiYVE9PSIsInZhbHVlIjoiYW9sRFNFeHVUQTMvYTFyQnJhMjAvNXQzTi9WbVA3ejlhcmgzUTBHZTN5aUM0bWNXbkgvdlJnT0tDL1ZsOU9nV0VoQXFXK1ZUZmFxNXp6Zi9TV25WY1FUVGU4dUEzTGpNL0hLOGtScWp6YW91REQxcUVEZVFIVEtMYXhSbktnWloiLCJtYWMiOiI0MGU3ZjliNTYwMGQxNGM2YmE2N2FkMDE0ZTUyZDg3MTVjNGMwNmRjZjgyN2U3MzhhMTJhYjE2NTM2ODNjYjJkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 06:50:05 GMT
Content-Type: image/webp
Content-Length: 3818
Connection: keep-alive
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Etag: "54lTPVXrpW2pPe5I+X4dfqsJ7mPWDjT2m2y2sVvIRb4"
Fastly-Io-Info: ifsz=4760 idim=351x144 ifmt=png ofsz=3818 odim=351x144 ofmt=webp
Fastly-Stats: io=1
X-Amz-Request-Id: tx00000000000000a6e8686-0062d0585c-c0351c8-sfo1
X-Rgw-Object-Type: Normal
X-Storage-Bucket: zb9d3
X-Storage-Object: b9d335ef26ff5819ae1a07f6a1185cbd9df6bc3383b4c934fe6a2ef02693f71c
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Age: 0
X-Served-By: cache-sjc10036-SJC, cache-pao17472-PAO
X-Cache: MISS, HIT
X-Cache-Hits: 0, 1
X-Timer: S1674024606.505040,VS0,VE30
Vary: Accept
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn61.sf2p.intern.weebly.net
myflashnet.square.site/app/website/square.ico
200 OK 6.5 kB URL HTTP/1.1 myflashnet.square.site/app/website/square.ico
IP
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash d810985ef4dc1c0bd5811e36d13c8ca3
2b45bb77c68c937af6a2d9854dc82301526473aa
770e0889aefd823056c7cdbb066a445be0f0754c1b4d4cba877e120fdbcb63e6
Analyzer Verdict Alert fortinet Phishing
GET /app/website/square.ico HTTP/1.1
Host: myflashnet.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myflashnet.square.site/
Cookie: _ga_DNQ3ZPYMQW=GS1.1.1654494733.1.0.1654494733.0; _ga=GA1.1.1202189608.1654494733; publishedsite-xsrf=eyJpdiI6IjczMHFGM1laYitldkpWNXdMWDdueFE9PSIsInZhbHVlIjoiK0xuVDcwTFE4RDhZWUgvZjJVQkdNZnBNWHRtM3hVcVhEVnV6Mmo2MlJEdWhuTDVuSVBseXJGNlNHRmhHTjRQdjBKZHZKQVM2UldkMG5UaHlLNG53aFIxSUFwUDZycjRBVXZ1VDZLQSsxREZ1ajV3bFI4UEVTTjgvcWxKbU4yZysiLCJtYWMiOiIzZDAxYzg4NmFjNGZmMTI4ZThjN2U5YzNmYzc2YWVhNzkzM2UzMmI0MDM3NjdkMzdkYjk3MzcxNmEwN2VlODQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InovMDRzUUZaVnJVQWNTR0wxakVMREE9PSIsInZhbHVlIjoiS0xad3FOU2syaUlUbHRReVY1MnZWR0VwTFR4aXExcDBCK3JCU0xoOWwxVGlWUFQ0OTgwc1BieGhWU2MvOVJ5NS8weWZEanczaWZ5cXZCbGtXMmdaVmE3bjk3MXl0MU9nSm5Hc3kzcDVFdmRGNUlJVTV4N3d2MlZERHpoY0FJOHkiLCJtYWMiOiJmMWIzNzcyYTVmOGUwM2U1YmU3YWU4MGQ3NTExOWFlMzg4ZGQwZjI5MmM3ODgzOThlYjE5MGVjNmY3ZjY5MWQ1IiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6IktMVys3L3JUZzZIcUZqaUw0TS9jWWc9PSIsInZhbHVlIjoickZHeTAvdkk0d0Zlb08vbWV5ek5obkRSMXdleU1vU2I0RjRmZS84aXQ3RE9wOE0zY044N0ZvSjlHSXJTcFZoWW5tODJOUE1YeGU1RHNtZG1hVElOVWp6eTdBTW11djR4QTgyZCtnalIvOWJCMUdRbURJYjJML2FhMXFGRTM2Qk0iLCJtYWMiOiJkNjVmM2ZiZjljNzU1ZmEzMTAyNTExZjJmZWRkN2E4YjkwYjI0ZDk5ZTgxYTkxMmI1NDlhZmUxYjFiNThhMzc0IiwidGFnIjoiIn0%3D; _snow_ses.02f3=*; _snow_id.02f3=80c38f91-17b0-421f-90ab-f1098229e431.1674024603.1.1674024605.1674024603.a44e829a-7d3b-499c-a181-4137a82412df; _dd_s=rum=1&id=1f09848d-0213-456c-a50a-592c4e418dcc&created=1674024603490&expire=1674025503490; websitespring-xsrf=eyJpdiI6InZCOEJZVW9QcmQ4Zm9vUU5qa3JiYVE9PSIsInZhbHVlIjoiYW9sRFNFeHVUQTMvYTFyQnJhMjAvNXQzTi9WbVA3ejlhcmgzUTBHZTN5aUM0bWNXbkgvdlJnT0tDL1ZsOU9nV0VoQXFXK1ZUZmFxNXp6Zi9TV25WY1FUVGU4dUEzTGpNL0hLOGtScWp6YW91REQxcUVEZVFIVEtMYXhSbktnWloiLCJtYWMiOiI0MGU3ZjliNTYwMGQxNGM2YmE2N2FkMDE0ZTUyZDg3MTVjNGMwNmRjZjgyN2U3MzhhMTJhYjE2NTM2ODNjYjJkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 06:50:05 GMT
Content-Type: image/x-icon
Content-Length: 6518
Connection: keep-alive
Last-Modified: Tue, 02 Apr 2019 14:51:59 GMT
x-rgw-object-type: Normal
ETag: "d810985ef4dc1c0bd5811e36d13c8ca3"
x-amz-request-id: tx000000000000001aa728b-00628473fa-b9fbc7f-sfo1
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Host: grn77.sf2p.intern.weebly.net
X-Revision: e3d880af6ba55bf2db335a8ddd219d3c93a40327
X-Request-ID: 82462a87045212d373b8f1dedd2fac13
199.34.228.40
93.184.220.29
23.36.77.32
104.18.20.226