Edit tour

Windows Analysis Report
https://att-online-2022.square.site/

Overview

General Information

Sample URL:	https://att-online-2022.square.site/
Analysis ID:	1521170
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Detected clear text password fields (password is not hidden)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2308,i,14080985283321869545,3690444837009334947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://att-online-2022.square.site/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO PHISHING Successful Generic Credit Card Information Phish 2020-02-26

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-28T05:24:52.849195+0200	2841226	1	Successful Credential Theft Detected	192.168.2.5	50142	3.233.158.26	443	TCP

HTTP traffic detected: POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveContent-Length: 2113sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json; charset=UTF-8Accept: */*Origin: https://att-online-2022.square.siteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://att-online-2022.square.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://att-online-2022.square.site/	LLM: Score: 9 Reasons: The legitimate domain for AT&T is att.com., The provided URL 'att-online-2022.square.site' does not match the legitimate domain., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'square.site' is not associated with AT&T and is a generic domain often used for various purposes, which raises suspicion. DOM: 0.1.pages.csv
Source: https://att-online-2022.square.site/	LLM: Score: 9 Reasons: The legitimate domain for AT&T is att.com., The provided URL (att-online-2022.square.site) does not match the legitimate domain., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'square.site' is not associated with AT&T and is a generic domain often used for various purposes, which raises suspicion., The presence of input fields for User ID and Password on a non-legitimate domain is a common phishing tactic. DOM: 0.2.pages.csv

Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon
Source: https://squareup.com/us/en/online-store	HTTP Parser: No favicon

Source: https://att-online-2022.square.site/	HTTP Parser: No <meta name="author".. found
Source: https://app.squareup.com/login?lang_code=en-us	HTTP Parser: No <meta name="author".. found
Source: https://app.squareup.com/login?lang_code=en-us	HTTP Parser: No <meta name="author".. found

Source: https://att-online-2022.square.site/	HTTP Parser: No <meta name="copyright".. found
Source: https://app.squareup.com/login?lang_code=en-us	HTTP Parser: No <meta name="copyright".. found
Source: https://app.squareup.com/login?lang_code=en-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_439.2.dr	String found in binary or memory: </a></div><div class="column"><a href="https://www.facebook.com/square/" title="Facebook"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" width="20" height="20"> equals www.facebook.com (Facebook)
Source: chromecache_439.2.dr	String found in binary or memory: </div><div class="column">United States (English)</div></a></div><div class="column"><nav class="grid-auto grid-space-base grid-align-center" role="navigation"><div class="column"><a href="https://twitter.com/Square/" title="Twitter"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" width="20" height="20"> equals www.twitter.com (Twitter)
Source: chromecache_337.2.dr, chromecache_617.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_600.2.dr, chromecache_337.2.dr, chromecache_617.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_337.2.dr, chromecache_617.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_705.2.dr, chromecache_625.2.dr, chromecache_600.2.dr, chromecache_630.2.dr, chromecache_286.2.dr, chromecache_607.2.dr, chromecache_634.2.dr, chromecache_440.2.dr, chromecache_456.2.dr, chromecache_314.2.dr, chromecache_340.2.dr, chromecache_403.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_541.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_541.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_541.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_600.2.dr, chromecache_337.2.dr, chromecache_617.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: att-online-2022.square.site
Source: global traffic	DNS traffic detected: DNS query: cdn3.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: ec.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sentry.io
Source: global traffic	DNS traffic detected: DNS query: rum.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: www.weebly.com
Source: global traffic	DNS traffic detected: DNS query: cdn5.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: f0c1bcce6fd3a83c9392.cdn6.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: squareup.com
Source: global traffic	DNS traffic detected: DNS query: session-replay.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: square-fonts-production-f.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: xms-production-f.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: videos.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: api.squareup.com
Source: global traffic	DNS traffic detected: DNS query: browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: martech-production-c.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: a8447815042.cdn-pci.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: 424-iab-218.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: tealium-f.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.sprig.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: 9628652.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: pixel.pointmediatracker.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: c.az.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: capi.squareup.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: 12345.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: us-central1-sq-sgtm-prod.cloudfunctions.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: assets.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: app.squareup.com
Source: global traffic	DNS traffic detected: DNS query: js.driftt.com
Source: global traffic	DNS traffic detected: DNS query: multipassui-production-c.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: privacyportal.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: dashboard-production-f.squarecdn.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2308,i,14080985283321869545,3690444837009334947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://att-online-2022.square.site/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2308,i,14080985283321869545,3690444837009334947,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:24:41 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09f35ad38c461-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=ML7l5hLg86VA0AiCqREQ1fmm.0aegfQBrhp0Zs.xbF0-1727493881-1.0.1.1-GEqahHiClYdKm827jUBFOmkerkxxrZvuQoban3HTCM5rTc.mRNxMAam2fQyYU_R.0.Qeg5j6033QI0TZwFCWoA; path=/; expires=Sat, 28-Sep-24 03:54:41 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:24:41 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09f39ebb9c420-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=c743GaCA2Ql5b1uSXsEat_EvDB.pGi9ua8eTJX1zUXQ-1727493881-1.0.1.1-L6ZhTBpW0Yv3URNH8tOiLnrUM1QTesNFEFkj_U5OD0XIlpGiW4xQ_r8Pp_g6y7BoAdJhzda3cfWohrdo1mpA0g; path=/; expires=Sat, 28-Sep-24 03:54:41 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:24:42 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09f3f38b741d2-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=07f0zZLxeuvf6kPzODlY7u48KutmVwgKT_IHLX05h5E-1727493882-1.0.1.1-7hzcnaRlnaqUxT.9q5adxB55yXyWTxK4xr6h.N94I1nNoPhEUPaH1odQEN1H91Bl42Mt9MHc.MDW2ZTDg2K_dg; path=/; expires=Sat, 28-Sep-24 03:54:42 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:24:48 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09f62b83918bc-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=RRlFxNJ67slarc5Npr9ntDFzlnN7NRdxODcDKjo72YI-1727493888-1.0.1.1-yFz2VhNep.xLA9XX9NU696VlHa69ua_3NBYMDm93FtExudE_sxX80tw2KlHyFdZsigaep_n1w4EPLSH.JRxLAQ; path=/; expires=Sat, 28-Sep-24 03:54:48 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:24:52 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09f7a18028c5f-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=YmZrU54ssr2qDSMDweaGjPdjRJjskS4rHp1.K5crLvY-1727493892-1.0.1.1-7TTpQu49RBJdvhhsUV8uxzCkBYc1Cl2SbjWlw4ed8PhO8B5fhv0ruzi037Bgt0vZV9bKJDvPZCRG2HWiuV8mnw; path=/; expires=Sat, 28-Sep-24 03:54:52 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:10 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca09fec3ac25e80-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=poCP1ukOFChr5vgind5KN33AW3T0qPATHoddes4S.T0-1727493910-1.0.1.1-7aK79PpvEHeeC5AXDqq9eix_gX9B_QF3NFY4ZQhGj5FNIPJC0nD.tXS0D8kUc9NQsdaozzlIDxEe3bCpg87JTw; path=/; expires=Sat, 28-Sep-24 03:55:10 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:18 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a01e09af1a13-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=3Oj0su2sMrxOe_SGX1lxAjIqHev6F.jaced62weAr.U-1727493918-1.0.1.1-TYVNwx63GrK5uDQDO4eDi0uL5x5DiZp3.vFqrDp9YCuMzg3sSX.XDaXShdsWY0wGnL1m8wHldBk97gONte69dg; path=/; expires=Sat, 28-Sep-24 03:55:18 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:19 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a021eea642ce-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=zOYkEDoXBqlv35PRA1Bfrmr2m0PmCyJp37ngl5A0ltA-1727493919-1.0.1.1-THfuMT7DtMuwZB0BtbbmQk7fVlcXL1d4__NI6j5g3W7GS8FLj2.r7CHBZ7AWqx1T8ab_FhNLZzTZTbB5BG0KjA; path=/; expires=Sat, 28-Sep-24 03:55:19 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:19 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a025a95b0cf1-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=Y0tMBgb3SSy2VYUnnkr9eFrLGcM4_NvzW8x3bWB9PeE-1727493919-1.0.1.1-vBQ2pdipNivE9ZxdwMLL1XV6pxDOZbaRnZCLWZzyo_fywPwDCAiB_a4ojj0cMPB9PYv0lNWX5W_b6v7IuLDXZg; path=/; expires=Sat, 28-Sep-24 03:55:19 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:20 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a0299bca4234-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=3BD.t528GIhQbm8qAgnO4STjg_lJD6ZXcpZw5eNC4fM-1727493920-1.0.1.1-zIOz4i2BV4WpqgGXapqw_zOxBTOo9c9z1FhbSWWm0kGGdGF3g2xlbAVVmE14Rh.3.2pHf6XxU4pOGsrdPFp60A; path=/; expires=Sat, 28-Sep-24 03:55:20 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:20 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a02d8ea70c88-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=B0RuPIMr9CPp2PQz8PfvJOIRzCxx8TrW0kQ_wqrPpJ4-1727493920-1.0.1.1-4jmny9RXWzJlbHmt9o7WQEpS.oFppgEvsLsi6z3gvUuywWNlCGdfThMWCWvTOK5sxSMAaP8QMKSFoBda4RSaNw; path=/; expires=Sat, 28-Sep-24 03:55:20 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:21 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a0317a9043ad-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=fjUmqHJz0BfcHQewFmRCVtL7FRzMU_oaTruCpex3VXg-1727493921-1.0.1.1-pwzdyJyKdFcRV2652rRdm2rkhmqCLV.4EdQCXpPZYPHybf.v_g8w7Z4qxET53tIVRJnWJM.q81lZ.QWFMtQesA; path=/; expires=Sat, 28-Sep-24 03:55:21 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:22 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a03548cc334e-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=GI1bq4aTEi3JBTpUWnMW4cCATYEAbuCGocp8RQda7ZQ-1727493922-1.0.1.1-GQtvErtPDrwzaQvSvfrcboWGTXn.fsGGrIoTijJXZw9sCCha5vireopkCI29lbNP.TndPfV31yVwnfiSQ48DdQ; path=/; expires=Sat, 28-Sep-24 03:55:22 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 03:25:24 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 8ca0a046b96c0ca6-EWRCF-Cache-Status: DYNAMICStrict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /1.0/features/get-flagsx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-envoy-safe-auth-decision: NOT_FOUNDx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: __cf_bm=ADdvIEqSTAsB222eHIG_vZC5nxsu3lFES_8LqHDjQ_I-1727493924-1.0.1.1-QzFH0NfADncct7O03zRx6El3QWtpa7PtfGjm20A8Y_eiFTAHjMl_ydxz1ye4kc1A1SvzrxOg8wTszBUfP3t4Uw; path=/; expires=Sat, 28-Sep-24 03:55:24 GMT; domain=.app.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 03:25:25 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 8ca0a04aff367cb2-EWRCF-Cache-Status: DYNAMICStrict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /1.0/features/get-flagsx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-envoy-safe-auth-decision: NOT_FOUNDx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: __cf_bm=oBgjVgcKpaHMN2wr4E1Gb1G2vK7XWpkn65Y_BjN4usk-1727493925-1.0.1.1-CNNEFLJdFiaiGSDDDluB7r_Y7qhzuNOatvpTcqG.b3s2qV0XrjPPnVcc0tyUWUwldFRu_krksBivHhVZC89DgA; path=/; expires=Sat, 28-Sep-24 03:55:25 GMT; domain=.app.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 03:25:26 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 8ca0a051c9175e6c-EWRCF-Cache-Status: DYNAMICStrict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /1.0/features/get-flagsx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-envoy-safe-auth-decision: NOT_FOUNDx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: __cf_bm=PPkNLDJb5bagAOlt.HzXaotGTc.jSc1eVoywRwUNPrs-1727493926-1.0.1.1-8NkVPGrC1MuDRdf0wDKbV.sHQA_trLPdygbJOXizY0vYvTU7qm1lisfxC5GBLt93kyq7Gorq9gIJiZOReooFPA; path=/; expires=Sat, 28-Sep-24 03:55:26 GMT; domain=.app.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:26 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a05318144314-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=GeH7Yi54WpS7HWoO_RhsxstzfDE4pnl67ojfZ1rYGnQ-1727493926-1.0.1.1-7_itY4urlnrh.xdUd5hXDllXqUnFsIpgUKwV82oBJ1kpLbtesKh2.O7zQLNBTtbBclEiESdQkwcSoc8Wwhco0Q; path=/; expires=Sat, 28-Sep-24 03:55:26 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 03:25:26 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 8ca0a05319ae0f63-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.multipass.external.MultipassExternalService/BrowserHook/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-envoy-safe-auth-decision: NOT_FOUNDx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=88M1lnETQF.fQ2ozDFn5ICKmz.z9pF.mMgAwDzEnuak-1727493926-1.0.1.1-T2bHuCDC8b_O3C27V0rEPMTXvEf1IAmB4e_vr6BILhc2yfFIlb0LWLP0nEj_BLiqBvUjdMIxXMZ78gNf0TS70Q; path=/; expires=Sat, 28-Sep-24 03:55:26 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:27 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a0576d404407-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=6pWINavU0dcfDoOqEFVNnMXg6kysRTDW.UpDi_ObtwU-1727493927-1.0.1.1-qu4NhYTEJH6PUObSc.kcc.jiMxLW3jKCiOCPx1byvUhx0gm9K4G0xb1qmx6euqA2Bw7WJKqh2J1mbCTSZzK0Yg; path=/; expires=Sat, 28-Sep-24 03:55:27 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:28 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a05c8b268c15-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=13MgcaHtA_i.rq_S_qpQnN4YogTpNECMHpytX2gTQ_4-1727493928-1.0.1.1-ZeIRpBL6wVOKKEWbzPwBZ.NhfR51Ik1rafUnFbH1p9ZPqjZLTUQfuxXmOEYqUOZJipWVssdbX5CGFEHD9xhG_Q; path=/; expires=Sat, 28-Sep-24 03:55:28 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 03:25:28 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 8ca0a05fed9441d9-EWRCF-Cache-Status: DYNAMICStrict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /1.0/features/get-flagsx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-envoy-safe-auth-decision: NOT_FOUNDx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: __cf_bm=yRChWsVPxxG5lrJ6Nn7Bgde9eFPtRLK399MPZ9lIuTk-1727493928-1.0.1.1-aAihBZBVLG6zCpSq7JAd1k32xnpchY8g8VFQdpodCxzGPkUKKDxRn..yGIMuhFFwkis_86Di5CGI0tr6H.Jbag; path=/; expires=Sat, 28-Sep-24 03:55:28 GMT; domain=.app.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:29 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a0608f494368-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=MLZOdwj4WwVCPEWKAxnUnpXoAqNUUbCwcZVy9M4BbvY-1727493929-1.0.1.1-kwGIZlZEi5bsB17R4CW9d7Itu0yK4njZTvUJiJ58e0KaeQ_QipwWgGQtRYsHRpbn5jutS1SNfOe26imJbYZWUQ; path=/; expires=Sat, 28-Sep-24 03:55:29 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:29 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a06449c5430e-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=zEjJY4.r99Vez28Ohw4wN3gcVn0qFV7fiEAeK0fBgs8-1727493929-1.0.1.1-oFOskx2zsNfc6f6JXGU_Ax5WFgFS_MlqoXX_PCYHb7oD4gMEC59SXw5CjLzNXy6u09.82Rs9BUdQpYFjkMr4.Q; path=/; expires=Sat, 28-Sep-24 03:55:29 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:30 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a068a90843c4-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=BIAK9RR_5fz5b6UWmuf3w.A_AWGzYHOX8rMcKIeU6Gs-1727493930-1.0.1.1-kh6dzWzr4Dy8ET11.n.IRhV4pTLblEy37dBIq5t.puAqR1pwSM88Rl4BUqLz6icMPKu1dZkK0tGq3.tjyKtTkw; path=/; expires=Sat, 28-Sep-24 03:55:30 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 28 Sep 2024 03:25:32 GMTContent-Type: text/plain; charset=utf-8Content-Length: 75Connection: closeCF-Ray: 8ca0a0749fd70f83-EWRCF-Cache-Status: DYNAMICSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadx-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /v1/cdp/batch/**x-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-dc: awsx-sq-region: us-east-1x-xss-protection: 1; mode=blockSet-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: __cf_bm=iAJjq53QelePA2YBQIJYykgLjf4Wr1WXobVaqrr64hA-1727493932-1.0.1.1-e2IZP6GTFmQ2EvwvKHFxpKuFvoaB1EC0PjB5cNXP66xJPWIa3RQkw03kv_GwTXXT3oLnURXfKl9YQ5WeQJj0kw; path=/; expires=Sat, 28-Sep-24 03:55:32 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://att-online-2022.square.site/	14%	Virustotal		Browse
https://att-online-2022.square.site/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
global.px.quantserve.com	0%	Virustotal	Browse
d2fashanjl7d9f.cloudfront.net	0%	Virustotal	Browse
cdn.sprig.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
dep.aa.contentsquare.net	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
424-iab-218.mktoresp.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
cdn.app.squareup.com	0%	Virustotal	Browse
dualstack.reddit.map.fastly.net	0%	Virustotal	Browse
prod.pinterest.global.map.fastly.net	0%	Virustotal	Browse
logx.optimizely.com	0%	Virustotal	Browse
reddit.map.fastly.net	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
dualstack.pinterest.map.fastly.net	0%	Virustotal	Browse
videos.ctfassets.net	0%	Virustotal	Browse
d18vfemg1ca5t3.cloudfront.net	0%	Virustotal	Browse
cdn.cookielaw.org	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
dart.l.doubleclick.net	0%	Virustotal	Browse
api.sprig.com	0%	Virustotal	Browse
weebly.map.fastly.net	0%	Virustotal	Browse
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	0%	Virustotal	Browse
att-online-2022.square.site	7%	Virustotal	Browse
us-central1-sq-sgtm-prod.cloudfunctions.net	0%	Virustotal	Browse
d3orhvfyxudxxq.cloudfront.net	0%	Virustotal	Browse
a8447815042.cdn-pci.optimizely.com	0%	Virustotal	Browse
squareup.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
adservice.google.com	0%	Virustotal	Browse
privacyportal.onetrust.com	0%	Virustotal	Browse
dl7g9llrghqi1.cloudfront.net	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
insight.adsrvr.org	0%	Virustotal	Browse
d3vd5wnau9aeoh.cloudfront.net	0%	Virustotal	Browse
squareup.map.fastly.net	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://cdn3.editmysite.com/app/website/js/58785.5895713e5e1e70bddbba.js	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/css/home-page.6c0c8e680c5c07e001fb.css	0%	URL Reputation	safe
https://cdn.cookielaw.org/consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json	0%	URL Reputation	safe
https://sandbox.square.online	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/js/6331.5797906ac316ae3ef8ed.js	0%	URL Reputation	safe
http://getify.mit-license.org	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/js/15279.9c826fe998ffbc01e8a3.js	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/js/navigation-mobile.dbe14dae5034202a3d67.js	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://cdn.sprig.com/shim.js?id=mVfPI-96JuPi	0%	URL Reputation	safe
https://images.editor.website	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/css/contact-us-1.ea115e03280426bb59cc.css	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js	0%	URL Reputation	safe
https://cdn3.editmysite.com/app/website/js/81930.05c4ffb29aa94344292b.js	0%	URL Reputation	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d2fashanjl7d9f.cloudfront.net	18.66.102.66	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.159	true	false	0%, Virustotal, Browse	unknown
424-iab-218.mktoresp.com	192.28.147.68	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	64.233.184.154	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.181.226	true	false	0%, Virustotal, Browse	unknown
cdn.sprig.com	108.138.26.52	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.100	true	false	0%, Virustotal, Browse	unknown
dep.aa.contentsquare.net	51.104.148.203	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	3.33.220.150	true	false	0%, Virustotal, Browse	unknown
l4-logs-http-replay-pub-s0-0da3e6651b0ebb8e.elb.us-east-1.amazonaws.com	3.233.158.27	true	false		unknown
logx.optimizely.com	34.49.241.189	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	0%, Virustotal, Browse	unknown
videos.ctfassets.net	18.66.122.76	true	false	0%, Virustotal, Browse	unknown
cdn.app.squareup.com	162.159.140.28	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
dualstack.reddit.map.fastly.net	151.101.65.140	true	false	0%, Virustotal, Browse	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	0%, Virustotal, Browse	unknown
reddit.map.fastly.net	151.101.129.140	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	216.58.212.130	true	false	0%, Virustotal, Browse	unknown
us-central1-sq-sgtm-prod.cloudfunctions.net	216.239.36.54	true	false	0%, Virustotal, Browse	unknown
dualstack.pinterest.map.fastly.net	151.101.192.84	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.184.226	true	false	0%, Virustotal, Browse	unknown
d18vfemg1ca5t3.cloudfront.net	18.245.60.71	true	false	0%, Virustotal, Browse	unknown
att-online-2022.square.site	74.115.51.5	true	true	7%, Virustotal, Browse	unknown
cdn.cookielaw.org	104.18.86.42	true	false	0%, Virustotal, Browse	unknown
d3orhvfyxudxxq.cloudfront.net	13.33.187.2	true	false	0%, Virustotal, Browse	unknown
dart.l.doubleclick.net	172.217.18.6	true	false	0%, Virustotal, Browse	unknown
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	52.43.122.147	true	false	0%, Virustotal, Browse	unknown
api.sprig.com	184.72.105.205	true	false	0%, Virustotal, Browse	unknown
weebly.map.fastly.net	151.101.1.46	true	false	0%, Virustotal, Browse	unknown
squareup.com	162.159.137.66	true	false	0%, Virustotal, Browse	unknown
a8447815042.cdn-pci.optimizely.com	172.64.144.102	true	false	0%, Virustotal, Browse	unknown
adservice.google.com	142.250.186.34	true	false	0%, Virustotal, Browse	unknown
dg2iu7dxxehbo.cloudfront.net	108.138.15.119	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
dl7g9llrghqi1.cloudfront.net	18.245.86.14	true	false	0%, Virustotal, Browse	unknown
insight.adsrvr.org	52.223.40.198	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	0%, Virustotal, Browse	unknown
privacyportal.onetrust.com	104.18.32.137	true	false	0%, Virustotal, Browse	unknown
squareup.map.fastly.net	151.101.1.49	true	false	0%, Virustotal, Browse	unknown
d3vd5wnau9aeoh.cloudfront.net	18.66.102.6	true	false	0%, Virustotal, Browse	unknown
www.weebly.com	74.115.51.7	true	false		unknown
api.squareup.com	162.159.136.66	true	false		unknown
t.contentsquare.net	18.244.18.112	true	false		unknown
browser-intake-datadoghq.com	3.233.158.26	true	true		unknown
ad.doubleclick.net	216.58.206.38	true	false		unknown
sentry.io	35.186.247.156	true	false		unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false		unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false		unknown
l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com	3.233.158.35	true	false		unknown
analytics.google.com	216.58.206.46	true	false		unknown
capi.squareup.com	18.144.72.236	true	false		unknown
ib.anycast.adnxs.com	37.252.171.52	true	false		unknown
geolocation.onetrust.com	172.64.155.119	true	false		unknown
assets.ctfassets.net	18.66.122.27	true	false		unknown
alb.reddit.com	unknown	unknown	false		unknown
cdn3.editmysite.com	unknown	unknown	false		unknown
rules.quantcount.com	unknown	unknown	false		unknown
f0c1bcce6fd3a83c9392.cdn6.editmysite.com	unknown	unknown	false		unknown
js.driftt.com	unknown	unknown	false		unknown
tealium-f.squarecdn.com	unknown	unknown	false		unknown
pixel.pointmediatracker.com	unknown	unknown	false		unknown
12345.fls.doubleclick.net	unknown	unknown	false		unknown
j.6sc.co	unknown	unknown	false		unknown
app.squareup.com	unknown	unknown	false		unknown
www.redditstatic.com	unknown	unknown	false		unknown
js.adsrvr.org	unknown	unknown	false		unknown
c.6sc.co	unknown	unknown	false		unknown
pixel.rubiconproject.com	unknown	unknown	false		unknown
images.ctfassets.net	unknown	unknown	false		unknown
connect.facebook.net	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
ec.editmysite.com	unknown	unknown	false		unknown
ipv6.6sc.co	unknown	unknown	false		unknown
cdn2.editmysite.com	unknown	unknown	false		unknown
square-fonts-production-f.squarecdn.com	unknown	unknown	false		unknown
ct.pinterest.com	unknown	unknown	false		unknown
xms-production-f.squarecdn.com	unknown	unknown	false		unknown
pixel-config.reddit.com	unknown	unknown	false		unknown
dashboard-production-f.squarecdn.com	unknown	unknown	false		unknown
9628652.fls.doubleclick.net	unknown	unknown	false		unknown
b.6sc.co	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
cdn5.editmysite.com	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		unknown
secure.quantserve.com	unknown	unknown	false		unknown
pixel.quantserve.com	unknown	unknown	false		unknown
c.az.contentsquare.net	unknown	unknown	false		unknown
session-replay.browser-intake-datadoghq.com	unknown	unknown	false		unknown
snap.licdn.com	unknown	unknown	false		unknown
s.pinimg.com	unknown	unknown	false		unknown
rum.browser-intake-datadoghq.com	unknown	unknown	false		unknown
martech-production-c.squarecdn.com	unknown	unknown	false		unknown
analytics.tiktok.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
multipassui-production-c.squarecdn.com	unknown	unknown	false		unknown

Name	Malicious	Antivirus Detection	Reputation
https://xms-production-f.squarecdn.com/xms/assets/precompile/components/animation-ab00e3aa93967a4c59b8c617f0edd951a4380dd34a7a7d5f8ced498dc28d31e9.js	false		unknown
https://multipassui-production-c.squarecdn.com/assets/favicon-d810985ef4dc1c0bd5811e36d13c8ca3.ico	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.30b0588a981660b45ed5.js	false		unknown
https://cdn3.editmysite.com/app/website/js/58785.5895713e5e1e70bddbba.js	false	URL Reputation: safe	unknown
https://cdn3.editmysite.com/app/website/css/home-page.6c0c8e680c5c07e001fb.css	false	URL Reputation: safe	unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.3cbdd73d85261c30db98.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.4cc02345bb581f3ac98a.js	false		unknown
https://multipassui-production-c.squarecdn.com/assets/chunk.414.3d309937ee36e202291b.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.82103932433746a6e9d0.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.5add8e6d8268cb347121.js	false		unknown
https://app.squareup.com/login?lang_code=en-us	false		unknown
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.44.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aecom-square-online-buyer-journey%2Cversion%3Aprime-8d5294e&dd-api-key=pubc6e7a7143c494f34f1366112ef7c1e2c&dd-evp-origin-version=4.44.0&dd-evp-origin=browser&dd-request-id=b70950dd-b412-4de3-b0e5-3ce5da2fb71d&batch_time=1727493862762	false		unknown
https://cdn.cookielaw.org/consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json	false	URL Reputation: safe	unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.ff34e12a2506802c0640.js	false		unknown
https://api.squareup.com/2.0/log/pixel_tracking?app_name=multipass&u_library_name=js%2Feventstream&u_library_version=__VERSION__&webpage_path=login&webpage_referrer=https%3A%2F%2Fsquareup.com%2F&webpage_title=Split%20Email%20Login&webpage_search=%3Flang_code%3Den-us&webpage_full_url=https%3A%2F%2Fapp.squareup.com%2Flogin%3Flang_code%3Den-us&webpage_base_url=https%3A%2F%2Fapp.squareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_view&subject_anonymous_token=504a0b77-d0b9-4b58-9f18-cab58f605842&track_cookie_forecast_channel=f_internal&track_cookie_detail_channel=d_startonsquare&track_cookie_partner_channel=p_weebly&track_cookie_campaign_channel=c_footer&track_cookie_product_channel=pr_startonsquare&nocache=17274939246373	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.8db8b60913c77167eebc.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.9740c45538b5d442f91f.js	false		unknown
https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Upright-VF.woff2	false		unknown
https://multipassui-production-c.squarecdn.com/assets/vendor-9ad6f4f3605054497b5a2c52aa407cd0.css	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.35909445b2dfda5dddb4.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.46bccde055e5ef370ad0.js	false		unknown
https://att-online-2022.square.site/	true		unknown
https://www.weebly.com/tracking/rtmetrics/buyer-analytics/1.0.0	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://multipassui-production-c.squarecdn.com/assets/chunk.4828.12e8373ba3d4d1180021.js	false		unknown
https://cdn3.editmysite.com/app/website/js/6331.5797906ac316ae3ef8ed.js	false	URL Reputation: safe	unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.eeb5aba3c39481224fe5.js	false		unknown
https://att-online-2022.square.site/ajax/api/JsonRPC/Commerce/?Commerce/[Checkout::hasCouponsAvailable]	true		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.5f8a934f4d9605cc91fe.js	false		unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.22.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Axms&dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin-version=5.22.0&dd-evp-origin=browser&dd-request-id=31c58122-fb94-4833-8a9e-040c4589a718	true		unknown
https://cdn3.editmysite.com/app/website/js/15279.9c826fe998ffbc01e8a3.js	false	URL Reputation: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.22.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Axms&dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin-version=5.22.0&dd-evp-origin=browser&dd-request-id=49969c18-a857-4351-bd3a-4fb6bf350f91&batch_time=1727493878038	true		unknown
https://c.az.contentsquare.net/pageview?ex=&dt=2562&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fsquareup.com%2Fus%2Fen%2Fonline-store&dr=&dw=1263&dh=9260&ww=1280&wh=907&sw=1280&sh=1024&uu=2c41b658-fdc5-acef-adb9-732e266f5220&sn=1&hd=1727493885&v=15.16.5&pid=68736&pn=1&r=730130	false		unknown
https://cdn3.editmysite.com/app/website/js/navigation-mobile.dbe14dae5034202a3d67.js	false	URL Reputation: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.22.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Axms&dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin-version=5.22.0&dd-evp-origin=browser&dd-request-id=7dd12e7a-228c-4c5d-ba0f-b2de77d6ad32&batch_time=1727493883416	true		unknown
https://connect.facebook.net/signals/config/816297701715444?v=2.9.169&r=stable&domain=squareup.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.7e517a7b0a7daa587d71.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.375d58fb35992efb5a5b.js	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://ct.pinterest.com/v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Fgtm-container.html%3Fcountry_code%3DUS%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fus%252Fen%252Fonline-store%26env%3Dprod%26referrer%3D%26avt%3D504a0b77-d0b9-4b58-9f18-cab58f605842%23Y291bnRyeV9jb2RlPVVTJnBhZ2VfdXJsPWh0dHBzJTNBJTJGJTJGc3F1YXJldXAuY29tJTJGdXMlMkZlbiUyRm9ubGluZS1zdG9yZSZlbnY9cHJvZCZyZWZlcnJlcj0mYXZ0PTUwNGEwYjc3LWQwYjktNGI1OC05ZjE4LWNhYjU4ZjYwNTg0Mg%3D%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2Fus%2Fen%2Fonline-store%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2297c41ef3%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1727493888555	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.39e39dd9e14b461a8c7d.js	false		unknown
https://c.az.contentsquare.net/dvar?v=15.16.5&pid=68736&pn=1&sn=1&uu=2c41b658-fdc5-acef-adb9-732e266f5220&dv=H4sIAAAAAAAAA6tWSiwrUbJSMjUwSTRIMjfXTTFIstQ1STK10LVMM7TQTU4EMtPMDEwtTIyUdJQKioBqi0sSi0ry84oLSxOLUoGCKVjECoBi5ampSTmVSrUAJKKSVGQAAAA%3D&ct=2&r=973202	false		unknown
https://multipassui-production-c.squarecdn.com/assets/multipassui-4fec3c7f263e679da2dd757906948626.js	false		unknown
https://cdn.sprig.com/shim.js?id=mVfPI-96JuPi	false	URL Reputation: safe	unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.945cb356f529b66612a5.js	false		unknown
https://att-online-2022.square.site/uploads/b/620b7f30-0a3e-11ed-ae97-0b890d0b5a86/icon_512x512_android_NjcxNT.png?width=192	true		unknown
https://videos.ctfassets.net/2d5q1td6cyxq/3EuzdYSnA1sfsa1YwkJanO/e303a96b128deb38a470db8100e01f7d/made-to-order-retail-v1.mp4	false		unknown
https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01	false		unknown
https://insight.adsrvr.org/track/up?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2Fus%2Fen%2Fonline-store&upid=ryupk6w&upv=1.1.0&paapi=1	false		unknown
https://att-online-2022.square.site/square.ico	true		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.2c150d7a4b4dacc9e09d.js	false		unknown
https://f0c1bcce6fd3a83c9392.cdn6.editmysite.com/uploads/b/f0c1bcce6fd3a83c9392e992c671d499e90df8c744cf314a0e26a213e0c84649/Color-ATT-Logo_1658551790.jpg?width=2400&optimize=medium	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.aee0a5f2dbdf19f9a7bd.js	false		unknown
https://xms-production-f.squarecdn.com/xms/assets/application-e6aca4f6f7b37afb445f62cc9bef0245af36d69290f65dc4f91b01fb831f427f.js	false		unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A5.22.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Axms&dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin-version=5.22.0&dd-evp-origin=browser&dd-request-id=172fd42d-427d-4f7b-9c07-d44e1f16a002	true		unknown
https://multipassui-production-c.squarecdn.com/assets/chunk.2143.a2e1c602bffe5287101c.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.3b26748f4d8d80261b7e.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.6b1b6fb76000258a8ee3.js	false		unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A5.22.0%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Axms&dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin-version=5.22.0&dd-evp-origin=browser&dd-request-id=4143a288-9840-400d-9035-00c330bec80a&batch_time=1727493885389	true		unknown
https://cdn2.editmysite.com/javascript/buyer-analytics-1.0.0.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.5ae9aeae61b0259e987c.js	false		unknown
https://ct.pinterest.com/user/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1727493888553&dep=5%2CEVENT_TAGS_ABSENT	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.655ed1263d7e4b09347c.js	false		unknown
https://us-central1-sq-sgtm-prod.cloudfunctions.net/sgtm_tag_monitoring	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.ca7bc9d170297d9407fa.js	false		unknown
https://dashboard-production-f.squarecdn.com/dashboard/assets/chunk.84fdbc1ddc5eb47031e3.js	false		unknown
https://cdn3.editmysite.com/app/website/css/contact-us-1.ea115e03280426bb59cc.css	false	URL Reputation: safe	unknown
https://cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js	false	URL Reputation: safe	unknown
https://cdn3.editmysite.com/app/website/js/81930.05c4ffb29aa94344292b.js	false	URL Reputation: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://images.ctfassets.net/2d5q1td6cyxq/5CBNUsypbQ1JG0JhWNpehw/c13970d6b79722515f568aafcadbcfa8/bi	chromecache_439.2.dr	false		unknown
https://github.com/videojs/video.js/issues/2617	chromecache_290.2.dr, chromecache_454.2.dr	false		unknown
https://squareup.com/t/f_online/d_display/p_phdp/c_brand/o_sq_sdk3_android_320x50/l	chromecache_313.2.dr	false		unknown
https://squareup.com/website-themes	chromecache_439.2.dr	false		unknown
https://multipassui-production-c.squarecdn.com/assets/chunk.2142.e0f38418e0450ad66055-00eac6f0696443	chromecache_390.2.dr, chromecache_669.2.dr	false		unknown
https://api.squareupstaging.com	chromecache_509.2.dr	false		unknown
https://sandbox.square.online	chromecache_335.2.dr	false	URL Reputation: safe	unknown
https://openjsf.org/	chromecache_290.2.dr, chromecache_447.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://www.enable-javascript.com/	chromecache_702.2.dr	false		unknown
https://xms-production-f.squarecdn.com/xms/assets/lottie-web/build/player/lottie.min-48a08c444e046cd	chromecache_439.2.dr	false		unknown
https://squareup.com/us/en/online-store?optimizely-snippet-injection-enabled=true	chromecache_439.2.dr	false		unknown
http://getify.mit-license.org	chromecache_290.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_572.2.dr, chromecache_305.2.dr	false	URL Reputation: safe	unknown
https://squareup.com/us/en/software/loyalty	chromecache_439.2.dr	false		unknown
https://supportcenter-production-f.squarecdn.com/help/opensearch.xml	chromecache_439.2.dr	false		unknown
https://images.ctfassets.net/2d5q1td6cyxq/7BsKL01oJ4e4iorO7HXGuE/0abfcf94f9a9bd975edf4e99fd134b3d/di	chromecache_439.2.dr	false		unknown
https://squareup.com/signup/us?lang_code	chromecache_534.2.dr, chromecache_422.2.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_290.2.dr, chromecache_447.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://github.com/videojs/video.js/blob/main/LICENSE	chromecache_290.2.dr, chromecache_454.2.dr	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=Y2FlOTU5Y2I	chromecache_572.2.dr, chromecache_305.2.dr	false		unknown
https://cdn.cookielaw.org/	chromecache_702.2.dr	false		unknown
https://api.squarestagingexternal.com/v1/cdp/batch	chromecache_509.2.dr	false		unknown
https://images.ctfassets.net/2d5q1td6cyxq/3I789FK0YwQT0dP0wy5azo/dc0cb4e58e96f3e221ceb94002573941/de	chromecache_439.2.dr	false		unknown
https://npms.io/search?q=ponyfill.	chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://squareup.com/us/en/campaign/take-payments	chromecache_534.2.dr, chromecache_422.2.dr	false		unknown
https://squareup.com/shop/hardware/us/en/products/register-pos	chromecache_534.2.dr, chromecache_422.2.dr	false		unknown
https://multipassui-production-c.squarecdn.com/assets/chunk.5007.f3a3dde604fb620fd965-8ad08517504a7d	chromecache_388.2.dr	false		unknown
https://images.editor.website	chromecache_335.2.dr	false	URL Reputation: safe	unknown
https://xms-production-f.squarecdn.com/xms/assets/precompile/components/animation-ab00e3aa93967a4c59	chromecache_439.2.dr	false		unknown
https://github.com/kesla/parse-headers/blob/master/LICENCE	chromecache_290.2.dr, chromecache_454.2.dr	false		unknown
https://squareup.com/shop/hardware/us/en/products/ipad-pos-stand-credit-card-reader	chromecache_534.2.dr, chromecache_422.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
18.244.18.112	t.contentsquare.net	United States	16509	AMAZON-02US	false
91.228.74.200	unknown	United Kingdom	27281	QUANTCASTUS	false
35.186.247.156	sentry.io	United States	15169	GOOGLEUS	false
18.144.72.236	capi.squareup.com	United States	16509	AMAZON-02US	false
13.33.187.16	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
108.138.15.119	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.65.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.245.60.36	unknown	United States	16509	AMAZON-02US	false
74.115.51.7	www.weebly.com	United States	27647	WEEBLYUS	false
74.115.51.4	unknown	United States	27647	WEEBLYUS	false
18.244.18.115	unknown	United States	16509	AMAZON-02US	false
74.115.51.5	att-online-2022.square.site	United States	27647	WEEBLYUS	true
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
151.101.1.49	squareup.map.fastly.net	United States	54113	FASTLYUS	false
172.217.18.6	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	analytics.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.228.74.159	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
151.101.192.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
18.245.86.14	dl7g9llrghqi1.cloudfront.net	United States	16509	AMAZON-02US	false
64.233.184.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.33.187.2	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.102.6	d3vd5wnau9aeoh.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
192.28.147.68	424-iab-218.mktoresp.com	United States	53580	MARKETOUS	false
18.66.122.76	videos.ctfassets.net	United States	3	MIT-GATEWAYSUS	false
18.66.102.66	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.159.137.66	squareup.com	United States	13335	CLOUDFLARENETUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
151.101.129.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
172.217.16.130	unknown	United States	15169	GOOGLEUS	false
108.138.26.52	cdn.sprig.com	United States	16509	AMAZON-02US	false
142.250.186.66	unknown	United States	15169	GOOGLEUS	false
18.245.60.71	d18vfemg1ca5t3.cloudfront.net	United States	16509	AMAZON-02US	false
3.233.158.27	l4-logs-http-replay-pub-s0-0da3e6651b0ebb8e.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.233.158.26	browser-intake-datadoghq.com	United States	14618	AMAZON-AESUS	true
54.148.226.32	unknown	United States	16509	AMAZON-02US	false
104.18.32.137	privacyportal.onetrust.com	United States	13335	CLOUDFLARENETUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
108.138.26.120	unknown	United States	16509	AMAZON-02US	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
52.43.122.147	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.233.158.35	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.186.34	adservice.google.com	United States	15169	GOOGLEUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
142.250.184.198	unknown	United States	15169	GOOGLEUS	false
184.72.105.205	api.sprig.com	United States	14618	AMAZON-AESUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
216.239.36.54	us-central1-sq-sgtm-prod.cloudfunctions.net	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
51.104.148.203	dep.aa.contentsquare.net	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.66.102.34	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.64.84	unknown	United States	54113	FASTLYUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
162.159.136.66	api.squareup.com	United States	13335	CLOUDFLARENETUS	false
172.64.144.102	a8447815042.cdn-pci.optimizely.com	United States	13335	CLOUDFLARENETUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.212.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.212.134	unknown	United States	15169	GOOGLEUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
162.159.140.28	cdn.app.squareup.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.46	unknown	United States	54113	FASTLYUS	false
18.66.122.27	assets.ctfassets.net	United States	3	MIT-GATEWAYSUS	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521170
Start date and time:	2024-09-28 05:23:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://att-online-2022.square.site/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@26/708@259/78
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://squareup.com/t/f_internal/d_startonsquare/p_weebly/c_footer/pr_startonsquare?route=/online-store

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://att-online-2022.square.site/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Windows Analysis Report
https://att-online-2022.square.site/

Input	Output
URL: https://att-online-2022.square.site/ Model: jbxai	{ "brand":["AT&T"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Sign In", "text_input_field_labels":["User ID", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://att-online-2022.square.site/ Model: jbxai	{ "brand":["AT&T"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign In", "text_input_field_labels":["User ID", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://att-online-2022.square.site/ Model: jbxai	{ "phishing_score":9, "brands":"AT&T", "legit_domain":"att.com", "classification":"wellknown", "reasons":["The legitimate domain for AT&T is att.com.", "The provided URL 'att-online-2022.square.site' does not match the legitimate domain.", "The URL contains extra words and hyphens which are common indicators of phishing.", "The domain 'square.site' is not associated with AT&T and is a generic domain often used for various purposes, which raises suspicion."], "brand_matches":[false], "url_match":false, "brand_input":"AT&T", "input_fields":"User ID, Password"}

URL: https://squareup.com/us/en/online-store Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create your site", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://squareup.com/us/en/online-store Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create your site", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://att-online-2022.square.site/ Model: jbxai	{ "phishing_score":9, "brands":"AT&T", "legit_domain":"att.com", "classification":"wellknown", "reasons":["The legitimate domain for AT&T is att.com.", "The provided URL (att-online-2022.square.site) does not match the legitimate domain.", "The URL contains extra words and hyphens which are common indicators of phishing.", "The domain 'square.site' is not associated with AT&T and is a generic domain often used for various purposes, which raises suspicion.", "The presence of input fields for User ID and Password on a non-legitimate domain is a common phishing tactic."], "brand_matches":[false], "url_match":false, "brand_input":"AT&T", "input_fields":"User ID, Password"}

URL: https://squareup.com/us/en/online-store Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create your site", "text_input_field_labels":["Start free", "Contact sales"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://squareup.com/us/en/online-store Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Create your site", "text_input_field_labels":"Start free, Contact sales", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://app.squareup.com/login?lang_code=en-us Model: jbxai	{ "brand":["Square"], "contains_trigger_text":true, "trigger_text":"Email or phone number", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone number"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://squareup.com/us/en/online-store Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create your site", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://app.squareup.com/login?lang_code=en-us Model: jbxai	{ "phishing_score":1, "brands":"Square", "legit_domain":"squareup.com", "classification":"wellknown", "reasons":["The brand 'Square' is well-known and commonly associated with the domain 'squareup.com'.", "The URL 'app.squareup.com' is a subdomain of 'squareup.com', which is the legitimate domain for Square.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL."], "brand_matches":[false], "url_match":false, "brand_input":"Square", "input_fields":"Email or phone number"}

URL: https://app.squareup.com/login?lang_code=en-us Model: jbxai	{ "brand":["Square"], "contains_trigger_text":false, "trigger_text":"New to Square?", "prominent_button_name":"Sign in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://app.squareup.com/login?lang_code=en-us Model: jbxai	{ "phishing_score":1, "brands":"Square", "legit_domain":"squareup.com", "classification":"wellknown", "reasons":["The brand 'Square' is well-known and commonly associated with the domain 'squareup.com'.", "The provided URL 'app.squareup.com' is a subdomain of 'squareup.com', which is legitimate.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions were found in the URL."], "brand_matches":[false], "url_match":false, "brand_input":"Square", "input_fields":"u, n, k, n, o, w, n"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 02:24:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981197961231768
Encrypted:	false
SSDEEP:	48:89dhTJlsHPidAKZdA19ehwiZUklqehny+3:8xL4Uy
MD5:	DDF05BD92C97957ECA070E68260180DD
SHA1:	736A0A81BD45FAF6EF7D5B70EF344394B1C6C173
SHA-256:	AF839CE3E3A1B115ECBBC367C78AF84854992E722BFBE70F7F202C2CE4B9324E
SHA-512:	CC8A18F15929111546CA29D6F17BE3A6D038AAAB1A4E6246581606F13A1CD9AF0DC1711E256B7755964D1DA83B3D3FAC98393DA15A902A52EBF014E965ED5757
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....?..U...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:11 UTC	670	OUT	GET / HTTP/1.1 Host: att-online-2022.square.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:11 UTC	1308	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 03:24:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ca09e7aed924289-EWR CF-Cache-Status: BYPASS Cache-Control: no-cache, private Set-Cookie: publishedsite-xsrf=eyJpdiI6IkZjbldLenBtczZuZi9DVCttVEwzVmc9PSIsInZhbHVlIjoibENxMFBMT3NsbklZRS9ONzk4aGNjWjJQRVFFVkdWUlZPUWNjVWxGaDI2NzZhaEd1ampOWVdhNlkwaEVGSG5naVl4S3p3QkxONXYwbFZUYm1tWkkzTTMwN1dxL3Flanhpc3kyRzdHVzJhV1QxYUlEaUxEeUlpNFk2UHI1b3dDZzUiLCJtYWMiOiI1MzZjZDU1NjJkOGFhYTBlNjBjYmY3ZTgzZGUwZjY2NTY4NGExMjliZGEzNGM0ZjYxNWQwMGVmZDM4OWVkM2Q1IiwidGFnIjoiIn0%3D; expires=Sat, 12 Oct 2024 03:24:11 GMT; Max-Age=1209600; path=/; secure; samesite=lax Vary: Accept-Encoding X-Host: grn126.sf2p.intern.weebly.net X-Request-ID: ad526afe4a50715f46a999a825e225a7 X-Revision: 8d5294e7b0184e5663d6be3916ba3e47ef019ae2 Set-Cookie: XSRF-TOKEN=eyJpdiI6InQ2Q1VQR1prWlpKWWF5RmcweW1FVmc9PSIsInZhbHVlIjoidXVnbXBrbnFTSDBLTzNULy95b0VYbDI2L1g3blhwVGhoek5TYU9GVnJTNWpGMk0zb2VyVGNqckU5Wi91eXFtNmxZaHB0TEtrNzR5ZXpPSE1Gb3hlaDQ0NzdzU1F0NkRzZkZ0eGN2ZEpNNmpvL3dSTEZkc3FvUDF2aEVPRzlXVCsiLCJtYWMiOiJjZGFjMTY4NzQ3MzlkYzRiYWIyNDUzZjAzOGM4NDQzYmZjNjc5YmEwZTJjZTI3MzY0MWJmOGM1ZTQyNjg2ZTUzIiwidGFnIjoiIn0%3D; expires=Sat, 12 Oct 2024 03:24:11 GMT; Max-Age=1209600; path=/; secure; samesite=lax
2024-09-28 03:24:11 UTC	757	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6b 30 61 6e 70 32 4e 55 4e 61 4d 57 78 6f 62 6b 31 5a 57 57 70 55 53 33 5a 33 65 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 47 78 4a 4e 30 74 4a 62 45 45 31 65 56 4e 76 52 6c 42 6b 5a 7a 64 4d 61 58 6c 77 59 32 74 50 55 45 70 4e 5a 48 4e 42 64 32 78 7a 56 57 52 58 53 46 52 56 52 6a 46 48 4c 32 4e 55 64 6b 64 54 64 57 39 75 54 47 6c 56 62 69 74 46 5a 32 4a 6b 4d 46 4a 44 61 32 70 51 54 55 5a 76 61 6b 35 48 63 31 5a 61 52 54 4a 47 4c 30 56 33 65 47 73 35 4d 30 4e 47 4d 31 63 30 4e 46 4a 48 52 6a 42 45 52 6d 70 54 63 46 68 6a 59 6b 51 34 51 6e 52 50 63 47 45 34 59 55 68 59 51 7a 68 44 61 48 5a 54 54 45 6b 33 59 33 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6Ikk0anp2NUNaMWxobk1ZWWpUS3Z3eGc9PSIsInZhbHVlIjoiUGxJN0tJbEE1eVNvRlBkZzdMaXlwY2tPUEpNZHNBd2xzVWRXSFRVRjFHL2NUdkdTdW9uTGlVbitFZ2JkMFJDa2pQTUZvak5Hc1ZaRTJGL0V3eGs5M0NGM1c0NFJHRjBERmpTcFhjYkQ4QnRPcGE4YUhYQzhDaHZTTEk3Y3
2024-09-28 03:24:11 UTC	673	IN	Data Raw: 37 37 38 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 54 26 54 20 59 61 68 6f 6f 20 4d 61 69 6c 20 7c 20 41 54 26 54 20 4f 6e 6c 69 6e 65 20 32 30 32 32 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 71 Data Ascii: 778e<!DOCTYPE html><html lang="en"><head> <title>AT&T Yahoo Mail \| AT&T Online 2022</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <meta name="generator" content="Sq
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 35 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 33 2c 20 31 66 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 69 64 2d 67 61 70 Data Ascii: top: 0; left: 0; z-index: 100; } .loading-container { width: 62px; height: 54px; display: grid; grid-template-columns: repeat(3, 1fr); grid-gap
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 65 6c 61 79 3a 20 30 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 33 37 35 30 6d 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 38 2c 20 30 2c 20 30 2e 38 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 64 6f 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 33 30 6d 73 3b 0a Data Ascii: elay: 0s; animation-duration: 3750ms; animation-iteration-count: infinite; animation-timing-function: cubic-bezier(0.8, 0, 0.8, 1); } .dot-container:nth-of-type(2) { animation-delay: 130ms;
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 36 2f 69 63 6f 6e 5f 31 38 30 78 31 38 30 5f 69 6f 73 5f 4d 6a 45 78 4d 44 2e 70 6e 67 3f 77 69 64 74 68 3d 31 38 30 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 27 20 63 6f 6e 74 65 6e 74 3d 27 2f 75 70 6c 6f 61 64 73 2f 62 2f 36 32 30 62 37 66 33 30 2d 30 61 33 65 2d 31 31 65 64 2d 61 65 39 37 2d 30 62 38 39 30 64 30 62 35 61 38 36 2f 69 63 6f 6e 5f 31 38 30 78 31 38 30 5f 69 6f 73 5f 4d 6a 45 78 4d 44 2e 70 6e 67 3f 77 69 64 74 68 3d 31 34 34 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 27 20 73 69 7a 65 73 3d 27 31 32 30 78 31 32 30 27 20 68 72 65 66 3d 27 2f 75 70 6c Data Ascii: 6/icon_180x180_ios_MjExMD.png?width=180'> <meta name='msapplication-TileImage' content='/uploads/b/620b7f30-0a3e-11ed-ae97-0b890d0b5a86/icon_180x180_ios_MjExMD.png?width=144'> <link rel='apple-touch-icon' sizes='120x120' href='/upl
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 61 70 70 6c 65 2d 74 6f 75 63 68 2d 73 74 61 72 74 75 70 2d 69 6d 61 67 65 27 20 68 72 65 66 3d 27 2f 75 70 6c 6f 61 64 73 2f 62 2f 36 32 30 62 37 66 33 30 2d 30 61 33 65 2d 31 31 65 64 2d 61 65 39 37 2d 30 62 38 39 30 64 30 62 35 61 38 36 2f 73 70 6c 61 73 68 5f 32 30 34 38 78 34 34 33 35 5f 4d 7a 67 30 4e 44 2e 6a 70 67 3f 77 69 64 74 68 3d 31 31 32 35 26 68 65 69 67 68 74 3d 32 34 33 36 26 66 69 74 3d 63 72 6f 70 27 20 6d 65 64 69 61 3d 27 28 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 33 37 35 70 78 29 20 61 6e 64 20 28 64 65 76 69 63 65 2d 68 65 69 67 68 74 3a 20 38 31 32 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 33 29 20 61 6e Data Ascii: <link rel='apple-touch-startup-image' href='/uploads/b/620b7f30-0a3e-11ed-ae97-0b890d0b5a86/splash_2048x4435_Mzg0ND.jpg?width=1125&height=2436&fit=crop' media='(device-width: 375px) and (device-height: 812px) and (-webkit-device-pixel-ratio: 3) an
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 33 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 70 6f 72 74 72 61 69 74 29 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 61 70 70 6c 65 2d 74 6f 75 63 68 2d 73 74 61 72 74 75 70 2d 69 6d 61 67 65 27 20 68 72 65 66 3d 27 2f 75 70 6c 6f 61 64 73 2f 62 2f 36 32 30 62 37 66 33 30 2d 30 61 33 65 2d 31 31 65 64 2d 61 65 39 37 2d 30 62 38 39 30 64 30 62 35 61 38 36 2f 73 70 6c 61 73 68 5f 32 30 34 38 78 34 34 33 35 5f 4d 7a 67 30 4e 44 2e 6a 70 67 3f 77 69 64 74 68 3d 31 35 33 36 26 68 65 69 67 68 74 3d 32 30 34 38 26 66 69 74 3d 63 72 6f 70 27 20 6d 65 64 69 61 3d 27 28 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 Data Ascii: -webkit-device-pixel-ratio: 3) and (orientation: portrait)'> <link rel='apple-touch-startup-image' href='/uploads/b/620b7f30-0a3e-11ed-ae97-0b890d0b5a86/splash_2048x4435_Mzg0ND.jpg?width=1536&height=2048&fit=crop' media='(device-width: 768px)
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 68 3a 20 31 30 32 34 70 78 29 20 61 6e 64 20 28 64 65 76 69 63 65 2d 68 65 69 67 68 74 3a 20 31 33 36 36 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 27 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 33 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 61 70 70 2f 63 68 65 63 6b 6f 75 74 2f 61 73 73 65 74 73 2f 63 68 65 63 6b 6f 75 74 2f 6a 73 2f 73 79 73 74 65 6d 2e 6a 73 22 20 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 3d 22 69 67 6e 6f 72 65 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: h: 1024px) and (device-height: 1366px) and (-webkit-device-pixel-ratio: 2)'> <script defer src="https://cdn3.editmysite.com/app/checkout/assets/checkout/js/system.js" data-cookieconsent="ignore"></script>
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 54 26 61 6d 70 3b 54 20 4f 6e 6c 69 6e 65 20 32 30 32 32 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 61 74 74 2d 6f 6e 6c 69 6e 65 2d 32 30 32 32 2e 73 71 75 61 72 65 2e 73 69 74 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 3d 22 69 67 6e 6f Data Ascii: meta property="og:site_name" content="AT&T Online 2022" /> <meta property="og:url" content="https://att-online-2022.square.site" /> <meta property="og:type" content="website" /> <script data-cookieconsent="igno
2024-09-28 03:24:11 UTC	1369	IN	Data Raw: 75 65 2c 22 69 73 54 68 65 6d 65 73 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 44 69 73 6d 69 73 73 65 64 22 3a 74 72 75 65 7d 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 31 36 35 38 35 35 31 39 32 36 2c 22 73 69 74 65 5f 76 65 72 73 69 6f 6e 73 22 3a 7b 22 70 75 62 6c 69 73 68 65 64 22 3a 7b 22 76 35 22 3a 22 33 33 36 66 33 37 34 30 2d 30 61 34 33 2d 31 31 65 64 2d 62 30 31 35 2d 39 39 66 34 30 31 63 64 32 66 65 63 22 2c 22 76 36 22 3a 22 33 36 35 66 36 39 61 30 2d 62 61 37 38 2d 31 31 65 64 2d 38 62 31 34 2d 33 66 66 66 61 64 34 30 64 38 34 31 22 2c 22 76 37 22 3a 22 61 39 34 63 35 62 63 30 2d 31 35 36 32 2d 31 31 65 65 2d 39 64 36 32 2d 64 62 30 63 63 32 37 39 39 39 31 37 22 2c 22 76 38 22 3a 22 66 32 64 61 63 38 34 30 2d 36 34 33 38 2d 31 31 65 65 2d 61 38 Data Ascii: ue,"isThemesAnnouncementDismissed":true},"publishedAt":1658551926,"site_versions":{"published":{"v5":"336f3740-0a43-11ed-b015-99f401cd2fec","v6":"365f69a0-ba78-11ed-8b14-3fffad40d841","v7":"a94c5bc0-1562-11ee-9d62-db0cc2799917","v8":"f2dac840-6438-11ee-a8

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	589	OUT	GET /app/website/css/site.c92c017857c17f69d8e6.css HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	687	IN	HTTP/1.1 200 OK Connection: close Content-Length: 151749 Server: nginx Content-Type: text/css Last-Modified: Wed, 11 Sep 2024 23:46:57 GMT ETag: "66e22bf1-250c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Revision: c97c7c63f2b86e7b76e936bdfcf966aa5beea015 X-Request-ID: 518274f5ea91a59312136b2de9b89f32 X-W-DC: SFO Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish Age: 1362071 X-Served-By: cache-ewr-kewr1740030-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727493852.076612,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 2e f0 9f 93 9a 31 39 2d 37 2d 30 75 47 65 76 67 7b 2d 2d 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 33 32 30 3b 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 6d 6f 62 69 6c 65 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 3a 76 61 72 28 2d 2d 6d 6f 62 69 6c 65 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 3b 2d 2d 6d 69 6e 2d 66 73 2d 2d 32 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 2d 31 29 2f 76 61 72 28 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 6d 69 6e 2d 66 73 2d 2d 31 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 30 29 2f 76 61 72 28 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 Data Ascii: .19-7-0uGevg{--min-resolution:320;--min-font-size:var(--mobile-base-font-size);--min-font-size-scale:var(--mobile-font-size-scale);--min-fs--2:calc(var(--min-fs--1)/var(--min-font-size-scale));--min-fs--1:calc(var(--min-fs-0)/var(--min-font-size-scale
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 76 61 72 28 2d 2d 6d 61 78 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 2d 72 61 6e 67 65 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 61 78 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 20 2d 20 76 61 72 28 2d 2d 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 29 3b 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 30 30 76 77 3b 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 20 2d 20 76 61 72 28 2d 2d 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 2a 31 70 78 29 3b 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 29 2f 76 61 72 28 2d 2d 72 65 73 6f 6c 75 74 69 Data Ascii: var(--max-font-size-scale));--resolution-range:calc(var(--max-resolution) - var(--min-resolution));--resolution:100vw;--resolution-progress:calc(var(--resolution) - var(--min-resolution)*1px);--interpolate-by:calc(var(--resolution-progress)/var(--resoluti
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 35 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 35 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 66 73 2d 36 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 36 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 36 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 66 73 2d 37 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 37 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 37 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 2d 2d 6c 69 6e 65 2d 68 65 69 67 68 74 2d 73 63 61 6c 65 3a 30 2e 39 35 3b 2d 2d 6c 68 2d 2d 32 3a 63 61 6c 63 Data Ascii: 5)1px + var(--range-fs-5)var(--interpolate-by));--fs-6:calc(var(--min-fs-6)1px + var(--range-fs-6)var(--interpolate-by));--fs-7:calc(var(--min-fs-7)1px + var(--range-fs-7)var(--interpolate-by));--line-height:1.5;--line-height-scale:0.95;--lh--2:calc
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 30 41 37 45 62 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 35 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 35 29 7d 2e f0 9f 93 9a 31 39 2d 37 2d 30 75 47 65 76 67 2e f0 9f 93 9a 31 39 2d 37 2d 30 5f 6c 67 5f 75 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 36 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 36 29 7d 2e f0 9f 93 9a 31 39 2d 37 2d 30 75 47 65 76 67 2e f0 9f 93 9a 31 39 2d 37 2d 30 5f 70 72 4c 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 37 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 37 29 7d 2e f0 9f 93 9a 31 39 2d 37 2d 30 72 49 32 6f 48 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6b 65 Data Ascii: 0A7Ebd{font-size:var(--fs-5);line-height:var(--lh-5)}.19-7-0uGevg.19-7-0_lg_u{font-size:var(--fs-6);line-height:var(--lh-6)}.19-7-0uGevg.19-7-0_prL8{font-size:var(--fs-7);line-height:var(--lh-7)}.19-7-0rI2oH{background-color:var(--make
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 76 69 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 64 69 76 69 64 65 72 2d 73 69 7a 65 29 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 20 2e 35 73 7d 2e f0 9f 93 9a 31 39 2d 37 2d 30 48 76 52 6d 4d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 f0 9f 93 9a 31 39 2d 37 2d 30 5f 4a 33 78 38 7b 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e f0 9f 93 9a 31 39 2d 37 2d 30 5f 78 62 49 71 7b 61 6e 69 6d 61 74 69 6f 6e 3a f0 9f 93 9a 31 39 Data Ascii: ground-color:var(--divider-color);border:none;height:var(--divider-size);margin:0;padding:0;transition:height .5s}.19-7-0HvRmM{display:flex;justify-content:center}@keyframes 19-7-0_J3x8{to{transform:rotate(1turn)}}.19-7-0_xbIq{animation:19
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 39 30 2c 23 31 62 31 62 31 62 29 29 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 66 6f 6e 74 2d 6c 61 62 65 6c 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 69 6e 68 65 72 69 74 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 66 6f 6e 74 2d 6c 61 62 65 6c 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2c 35 30 30 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 Data Ascii: :var(--color,var(--maker-color-neutral-90,#1b1b1b));cursor:pointer;display:inline-flex;font-family:var(--maker-font-label-font-family,inherit);font-weight:var(--maker-font-label-font-weight,500);min-width:0;outline-color:currentColor;padding:0;position:re
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 61 6e 79 77 68 65 72 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 63 6b 6f 5f 5f 68 65 61 64 65 72 2d 62 61 63 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 74 65 70 2d 6d 69 6e 75 73 2d 31 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 74 65 70 2d 6d 69 6e 75 73 2d 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 63 6b 6f 5f 5f Data Ascii: ne-height:1.1!important;overflow-wrap:anywhere;text-align:inherit;white-space:normal;width:-moz-fit-content;width:fit-content}.cko__header-back{font-size:var(--font-step-minus-1-size);font-weight:600;line-height:var(--font-step-minus-1-line-height)}.cko__
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 69 67 68 74 3a 35 30 30 3b 67 61 70 3a 76 61 72 28 2d 2d 73 70 61 63 65 2d 68 61 6c 66 29 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 63 6b 6f 2d 65 78 70 61 6e 64 61 62 6c 65 2d 73 75 6d 6d 61 72 79 5b 64 61 74 61 2d 76 2d 35 34 34 63 36 62 39 64 5d 3a 3a 2d 77 65 62 6b 69 74 2d 64 65 74 61 69 6c 73 2d 6d 61 72 6b 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 6b 6f 2d 65 78 70 61 6e 64 61 62 6c 65 2d 69 63 6f 6e 5b 64 61 74 61 2d 76 2d 35 34 34 63 36 62 39 64 5d 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 31 35 39 6d 73 20 6c 69 6e 65 61 72 7d 2e 63 6b 6f 2d 65 78 70 61 6e 64 61 62 6c 65 2d 69 63 6f 6e 2e 69 73 2d 6f 70 65 6e 5b 64 61 74 61 2d 76 Data Ascii: ight:500;gap:var(--space-half);list-style:none}.cko-expandable-summary[data-v-544c6b9d]::-webkit-details-marker{display:none}.cko-expandable-icon[data-v-544c6b9d]{transform:rotate(0deg);transition:transform 159ms linear}.cko-expandable-icon.is-open[data-v
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 63 6b 6f 5f 5f 61 70 70 5f 6d 6f 75 6e 74 2c 23 63 6b 6f 5f 5f 61 70 70 5f 6d 6f 75 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 63 6b 6f 5f 5f 61 70 70 2d 6d 6f 75 6e 74 2d 6c 6f 61 64 69 6e 67 7b 67 72 69 64 2d 67 61 70 3a 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 33 29 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 76 61 72 28 2d 2d 73 70 61 63 65 2d 78 33 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 6b 6f 5f 5f 68 65 61 64 65 72 2d 69 74 65 6d 73 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 Data Ascii: cko__app_mount,#cko__app_mount_container{height:100%}.cko__app-mount-loading{grid-gap:var(--space-x3);align-items:center;display:flex;flex-direction:column;gap:var(--space-x3);height:100%;justify-content:center}.cko__header-items{align-items:center;displa
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 32 34 70 78 20 32 34 70 78 20 76 61 72 28 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 62 6f 74 74 6f 6d 2d 70 61 64 64 69 6e 67 29 20 32 34 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 33 39 70 78 29 7b 2e f0 9f 93 9a 31 39 2d 37 2d 30 6e 6a 72 5f 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 34 30 70 78 29 7b 2e f0 9f 93 9a 31 39 2d 37 2d 30 78 55 54 6f 71 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e f0 9f 93 9a 31 39 2d 37 2d 30 79 6c 4e 55 78 7b Data Ascii: 24px 24px var(--actionbar-bottom-padding) 24px;pointer-events:none}@media screen and (max-width:839px){.19-7-0njr_s{display:none}}@media screen and (min-width:840px){.19-7-0xUToq{display:none}}@media screen and (min-width:1200px){.19-7-0ylNUx{

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	606	OUT	GET /app/checkout/assets/checkout/css/wcko.049619101192b0140d13.css HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	582	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23373 Server: nginx Content-Type: text/css Last-Modified: Tue, 24 Sep 2024 17:40:16 GMT ETag: "66f2f980-5b4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-W-DC: SFO Accept-Ranges: bytes Age: 271856 Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740060-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727493852.076736,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 2e f0 9f 93 9a 31 39 2d 36 2d 30 65 6a 7a 47 48 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 67 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 23 66 66 66 29 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 73 68 61 70 65 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 34 70 78 29 20 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 73 68 61 70 65 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 34 70 78 29 20 30 20 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 63 6f 6c 6f 72 2d 62 6f 64 79 2c 23 30 30 30 29 29 3b 6d 61 78 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 Data Ascii: .19-6-0ejzGH{background:var(--bg-color,var(--maker-color-background,#fff));border-radius:var(--maker-shape-default-border-radius,4px) var(--maker-shape-default-border-radius,4px) 0 0;color:var(--color,var(--maker-color-body,#000));max-height:calc(100v
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 61 6b 65 72 2d 63 6f 6c 6f 72 2d 62 6f 64 79 2c 23 30 30 30 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 66 6f 6e 74 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 69 6e 68 65 72 69 74 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 66 6f 6e 74 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2c 34 30 30 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 75 47 65 76 67 7b 2d 2d 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 33 32 30 3b 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 6d 6f 62 69 6c 65 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d 2d 6d 69 6e 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 3a 76 61 72 28 2d 2d 6d 6f 62 69 6c 65 2d 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: aker-color-body,#000);font-family:var(--maker-font-body-font-family,inherit);font-weight:var(--maker-font-body-font-weight,400)}.19-6-0uGevg{--min-resolution:320;--min-font-size:var(--mobile-base-font-size);--min-font-size-scale:var(--mobile-font-size
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 78 2d 66 73 2d 34 29 2a 76 61 72 28 2d 2d 6d 61 78 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 6d 61 78 2d 66 73 2d 36 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 61 78 2d 66 73 2d 35 29 2a 76 61 72 28 2d 2d 6d 61 78 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 6d 61 78 2d 66 73 2d 37 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 61 78 2d 66 73 2d 36 29 2a 76 61 72 28 2d 2d 6d 61 78 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 63 61 6c 65 29 29 3b 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 2d 72 61 6e 67 65 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 61 78 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 20 2d 20 76 61 72 28 2d 2d 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 29 29 3b 2d 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 30 30 76 77 3b 2d 2d 72 65 73 6f 6c 75 74 Data Ascii: x-fs-4)var(--max-font-size-scale));--max-fs-6:calc(var(--max-fs-5)var(--max-font-size-scale));--max-fs-7:calc(var(--max-fs-6)*var(--max-font-size-scale));--resolution-range:calc(var(--max-resolution) - var(--min-resolution));--resolution:100vw;--resolut
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 73 2d 33 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 66 73 2d 34 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 34 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 34 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 66 73 2d 35 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 35 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 35 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d 66 73 2d 36 3a 63 61 6c 63 28 76 61 72 28 2d 2d 6d 69 6e 2d 66 73 2d 36 29 2a 31 70 78 20 2b 20 76 61 72 28 2d 2d 72 61 6e 67 65 2d 66 73 2d 36 29 2a 76 61 72 28 2d 2d 69 6e 74 65 72 70 6f 6c 61 74 65 2d 62 79 29 29 3b 2d 2d Data Ascii: s-3)var(--interpolate-by));--fs-4:calc(var(--min-fs-4)1px + var(--range-fs-4)var(--interpolate-by));--fs-5:calc(var(--min-fs-5)1px + var(--range-fs-5)var(--interpolate-by));--fs-6:calc(var(--min-fs-6)1px + var(--range-fs-6)*var(--interpolate-by));--
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 33 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 75 47 65 76 67 2e f0 9f 93 9a 31 39 2d 36 2d 30 5f 30 48 61 76 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 34 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 34 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 75 47 65 76 67 2e f0 9f 93 9a 31 39 2d 36 2d 30 41 37 45 62 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 35 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 2d 35 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 75 47 65 76 67 2e f0 9f 93 9a 31 39 2d 36 2d 30 5f 6c 67 5f 75 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 73 2d 36 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 68 Data Ascii: ne-height:var(--lh-3)}.19-6-0uGevg.19-6-0_0Hav{font-size:var(--fs-4);line-height:var(--lh-4)}.19-6-0uGevg.19-6-0A7Ebd{font-size:var(--fs-5);line-height:var(--lh-5)}.19-6-0uGevg.19-6-0_lg_u{font-size:var(--fs-6);line-height:var(--lh
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 66 65 72 65 6e 63 65 2d 68 69 64 64 65 6e 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 58 39 47 6b 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 30 2c 23 66 31 66 31 66 31 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 6d 61 6b 65 72 2d 73 68 61 70 65 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 34 70 78 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 Data Ascii: eference-hidden]{pointer-events:none;visibility:hidden}.19-6-0X9Gka{background-color:var(--maker-color-background,#fff);border:1px solid var(--maker-color-neutral-10,#f1f1f1);border-radius:var(--maker-shape-default-border-radius,4px);box-shadow:0 0 18
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 7b 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 74 6f 70 2d 70 61 64 64 69 6e 67 3a 32 34 70 78 3b 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 73 69 7a 65 3a 34 38 70 78 3b 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 62 6f 74 74 6f 6d 2d 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 32 34 70 78 20 2b 20 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 2c 20 32 34 70 78 29 20 2b 20 76 61 72 28 2d 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 2d 6f 66 66 73 65 74 2c 20 30 70 78 29 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 74 6f 70 2d 70 61 64 64 69 6e 67 29 20 2b 20 76 61 72 28 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 73 69 7a 65 29 20 2b 20 76 61 72 28 2d 2d 61 63 74 69 6f 6e 62 61 72 2d 62 6f 74 Data Ascii: {--actionbar-top-padding:24px;--actionbar-size:48px;--actionbar-bottom-padding:calc(24px + env(safe-area-inset-bottom, 24px) + var(--chrome-bottom-offset, 0px));padding-bottom:calc(var(--actionbar-top-padding) + var(--actionbar-size) + var(--actionbar-bot
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 29 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 6d 65 64 69 75 6d 2d 68 65 69 67 68 74 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 73 6d 66 44 61 7b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2c 23 30 30 30 29 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 73 6d 66 44 61 2e f0 9f 93 9a 31 39 2d 36 2d 30 77 6c 37 31 63 3e 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 73 6d 66 44 61 2e f0 9f 93 9a 31 39 2d 36 2d 30 6b 33 57 53 47 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 73 6d 66 44 61 2e f0 9f 93 9a 31 39 2d 36 2d 30 6d 5f 77 56 71 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e f0 9f 93 9a 31 39 2d 36 2d Data Ascii: );padding:0;width:var(--medium-height)}.19-6-0smfDa{--text-color:var(--color-contrast,#000)}.19-6-0smfDa.19-6-0wl71c>*{line-height:0}.19-6-0smfDa.19-6-0k3WSG{width:100%}.19-6-0smfDa.19-6-0m_wVq{justify-content:center}.19-6-
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 73 70 6c 61 79 3a 66 6c 65 78 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 47 55 4a 45 47 7b 6f 70 61 63 69 74 79 3a 2e 36 3b 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 6d 69 6e 2d 63 6f 6e 74 65 6e 74 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 65 73 42 4d 36 20 2e f0 9f 93 9a 31 39 2d 36 2d 30 47 55 4a 45 47 7b 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 5f 70 42 61 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e f0 9f 93 9a 31 39 2d 36 2d 30 5f 70 42 61 61 20 2e f0 9f 93 9a 31 39 2d 36 2d 30 47 55 4a 45 47 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e f0 9f 93 9a 31 39 2d 36 2d Data Ascii: splay:flex}.19-6-0GUJEG{opacity:.6;width:-webkit-min-content;width:min-content}.19-6-0esBM6 .19-6-0GUJEG{width:-webkit-max-content;width:max-content}.19-6-0_pBaa{text-align:right}.19-6-0_pBaa .19-6-0GUJEG{text-align:left}.19-6-
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 74 65 78 74 2f 53 71 75 61 72 65 53 61 6e 73 54 65 78 74 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 74 65 78 74 2f 53 Data Ascii: display:auto;font-family:Square Sans Text;font-style:normal;font-weight:400;src:url(https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Regular.woff2) format("woff2"),url(https://square-fonts-production-f.squarecdn.com/square-text/S

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	571	OUT	GET /app/checkout/assets/checkout/js/system.js HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12229 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Thu, 19 Sep 2024 20:42:08 GMT ETag: "66ec8ca0-2fc5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-W-DC: SFO Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish Age: 491201 X-Served-By: cache-ewr-kewr1740049-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727493852.289185,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 79 73 74 65 6d 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2b 22 20 28 53 79 73 74 65 6d 4a 53 20 45 72 72 6f 72 23 22 2b 65 2b 22 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 79 73 74 65 6d 6a 73 2f 73 79 73 74 65 6d 6a 73 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 64 6f 63 73 2f 65 72 72 6f 72 73 2e 6d 64 23 22 2b 65 2b 22 29 22 7d 76 61 72 20 74 2c 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f Data Ascii: /! For license information please see system.js.LICENSE.txt /!function(){function e(e,t){return(t\|\|"")+" (SystemJS Error#"+e+" https://github.com/systemjs/systemjs/blob/main/docs/errors.md#"+e+")"}var t,n="undefined"!=typeof Symbol,r="undefined"!=typeo
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 20 6f 20 69 6e 20 65 29 7b 76 61 72 20 73 3d 61 28 6f 2c 6e 29 7c 7c 6f 2c 75 3d 65 5b 6f 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 29 7b 76 61 72 20 63 3d 6d 28 72 2c 61 28 75 2c 6e 29 7c 7c 75 2c 69 29 3b 63 3f 74 5b 73 5d 3d 63 3a 76 28 22 57 31 22 2c 6f 2c 75 2c 22 62 61 72 65 20 73 70 65 63 69 66 69 65 72 20 64 69 64 20 6e 6f 74 20 72 65 73 6f 6c 76 65 22 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 20 69 6e 20 65 2e 69 6d 70 6f 72 74 73 26 26 6c 28 65 2e 69 6d 70 6f 72 74 73 2c 6e 2e 69 6d 70 6f 72 74 73 2c 74 2c 6e 2c 6e 75 6c 6c 29 2c 65 2e 73 63 6f 70 65 73 7c 7c 7b 7d 29 7b 76 61 72 20 69 3d 66 28 72 2c 74 29 3b 6c 28 65 2e 73 63 6f 70 65 73 5b 72 5d 2c 6e 2e 73 63 Data Ascii: o in e){var s=a(o,n)\|\|o,u=e[o];if("string"==typeof u){var c=m(r,a(u,n)\|\|u,i);c?t[s]=c:v("W1",o,u,"bare specifier did not resolve")}}}function d(e,t,n){var r;for(r in e.imports&&l(e.imports,n.imports,t,n,null),e.scopes\|\|{}){var i=f(r,t);l(e.scopes[r],n.sc
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 28 21 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 65 28 32 2c 22 4d 6f 64 75 6c 65 20 22 2b 6e 2b 22 20 64 69 64 20 6e 6f 74 20 69 6e 73 74 61 6e 74 69 61 74 65 22 29 29 3b 76 61 72 20 69 3d 72 5b 31 5d 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6f 2e 68 3d 21 30 3b 76 61 72 20 6e 3d 21 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 65 20 69 6e 20 75 26 26 75 5b 65 5d 3d 3d 3d 74 7c 7c 28 75 5b 65 5d 3d 74 2c 6e 3d 21 30 29 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 3d 65 5b 72 5d 2c 72 20 69 6e 20 75 26 26 75 5b 72 5d 3d 3d 3d 74 7c 7c 28 75 5b 72 5d 3d 74 2c 6e 3d 21 30 29 3b 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 75 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 Data Ascii: (!r)throw Error(e(2,"Module "+n+" did not instantiate"));var i=r[1]((function(e,t){o.h=!0;var n=!1;if("string"==typeof e)e in u&&u[e]===t\|\|(u[e]=t,n=!0);else{for(var r in e)t=e[r],r in u&&u[r]===t\|\|(u[r]=t,n=!0);e&&e.__esModule&&(u.__esModule=e.__esModule
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 74 2e 43 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 43 3d 6a 28 65 2c 74 2c 74 2c 7b 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 28 65 2c 74 2c 7b 7d 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6e 7d 29 29 7d 28 72 2c 74 29 7d 29 29 7d 2c 53 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 7b 75 72 6c 3a 65 2c 72 65 73 6f 6c 76 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 2e 72 65 73 6f 6c 76 65 28 6e 2c 72 7c 7c 65 29 29 7d 7d 7d 2c 53 2e 6f 6e 6c 6f 61 64 3d 66 Data Ascii: eturn t.C\|\|function(e,t){return t.C=j(e,t,t,{}).then((function(){return M(e,t,{})})).then((function(){return t.n}))}(r,t)}))},S.createContext=function(e){var t=this;return{url:e,resolve:function(n,r){return Promise.resolve(t.resolve(n,r\|\|e))}}},S.onload=f
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 6e 74 28 74 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 29 29 7d 65 6c 73 65 20 69 66 28 22 73 79 73 74 65 6d 6a 73 2d 69 6d 70 6f 72 74 6d 61 70 22 3d 3d 3d 6e 2e 74 79 70 65 29 7b 6e 2e 73 70 3d 21 30 3b 76 61 72 20 72 3d 6e 2e 73 72 63 3f 28 53 79 73 74 65 6d 2e 66 65 74 63 68 7c 7c 66 65 74 63 68 29 28 6e 2e 73 72 63 2c 7b 69 6e 74 65 67 72 69 74 79 3a 6e 2e 69 6e 74 65 67 72 69 74 79 2c 70 61 73 73 54 68 72 6f 75 67 68 3a 21 30 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 6f 6b 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 61 74 75 73 20 63 6f 64 65 3a 20 22 2b 65 2e 73 74 61 74 75 73 29 3b 72 65 74 75 72 6e 20 65 2e 74 65 78 74 28 29 7d 29 29 2e 63 Data Ascii: ent(t)}return Promise.reject(e)}))}else if("systemjs-importmap"===n.type){n.sp=!0;var r=n.src?(System.fetch\|\|fetch)(n.src,{integrity:n.integrity,passThrough:!0}).then((function(e){if(!e.ok)throw Error("Invalid status code: "+e.status);return e.text()})).c
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 28 74 68 69 73 2c 65 2c 74 29 7d 2c 53 2e 69 6e 73 74 61 6e 74 69 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 4a 5b 74 5d 3b 69 66 28 72 29 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 4a 5b 74 5d 2c 72 3b 76 61 72 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 53 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 74 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 45 72 72 6f 72 28 65 28 33 2c 22 45 72 72 6f 72 20 6c 6f 61 64 69 6e 67 20 22 2b 74 2b 28 6e 3f Data Ascii: (this,e,t)},S.instantiate=function(t,n){var r=J[t];if(r)return delete J[t],r;var i=this;return Promise.resolve(S.createScript(t)).then((function(r){return new Promise((function(o,s){r.addEventListener("error",(function(){s(Error(e(3,"Error loading "+t+(n?
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 20 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 78 28 74 68 69 73 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 28 72 5b 69 5d 2c 65 29 2c 65 29 3b 72 65 74 75 72 6e 20 42 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2c 6e 29 7d 2c 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 26 26 28 53 2e 69 6e 73 74 61 6e 74 69 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 65 29 2c 74 2e 67 65 74 52 65 67 69 73 74 65 72 28 65 29 7d 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 Data Ascii: i=0;i<r.length;i++)x(this,this.resolve(r[i],e),e);return B.call(this,e,t,n)},r&&"function"==typeof importScripts&&(S.instantiate=function(e){var t=this;return Promise.resolve().then((function(){return importScripts(e),t.getRegister(e)}))}),function(e){va
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 69 66 28 6e 2e 70 61 73 73 54 68 72 6f 75 67 68 29 72 65 74 75 72 6e 20 72 3b 69 66 28 21 72 2e 6f 6b 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 75 3d 72 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 29 3b 72 65 74 75 72 6e 20 69 2e 74 65 73 74 28 75 29 3f 72 2e 6a 73 6f 6e 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 73 70 6f 6e 73 65 28 6e 65 77 20 42 6c 6f 62 28 5b 27 53 79 73 74 65 6d 2e 72 65 67 69 73 74 65 72 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 65 78 65 63 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 64 65 66 61 75 6c 74 22 2c 27 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2b 22 29 7d 7d 7d 29 22 5d 2c 7b 74 Data Ascii: if(n.passThrough)return r;if(!r.ok)return r;var u=r.headers.get("content-type");return i.test(u)?r.json().then((function(e){return new Response(new Blob(['System.register([],function(e){return{execute:function(){e("default",'+JSON.stringify(e)+")}}})"],{t
2024-09-28 03:24:12 UTC	1205	IN	Data Raw: 3a 72 7d 29 29 7d 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 67 6c 6f 62 61 6c 29 3b 76 61 72 20 46 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 3b 53 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 5b 79 5d 5b 65 5d 3b 69 66 28 74 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 65 26 26 21 74 2e 45 29 72 65 74 75 72 6e 20 74 2e 65 72 3f 6e 75 6c 6c 3a 74 2e 6e 7d 2c 53 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 6e 65 77 20 55 52 4c 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 45 72 72 6f 72 28 65 28 22 57 33 22 2c 27 22 27 2b 74 2b Data Ascii: :r}))}}("undefined"!=typeof self?self:global);var F="undefined"!=typeof Symbol&&Symbol.toStringTag;S.get=function(e){var t=this[y][e];if(t&&null===t.e&&!t.E)return t.er?null:t.n},S.set=function(t,n){try{new URL(t)}catch(n){console.warn(Error(e("W3",'"'+t+

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	576	OUT	GET /app/website/js/runtime.6399f5a65670b2b6c719.js HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63094 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Thu, 26 Sep 2024 20:38:43 GMT ETag: "66f5c653-f676" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Revision: 7bcc5293a4c7042494c1f321d921399207e2b136 X-Request-ID: 32d6ce5e257a7c95602aa640068f5dad X-W-DC: SFO Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish Age: 105058 X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727493852.288745,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 7d 2c 68 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 72 3d 68 5b 65 5d 3b 69 66 28 72 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 68 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6d 5b 65 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 63 29 2c 61 2e 6c 6f 61 64 65 64 3d 21 30 2c 61 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 6d 2c 63 2e 61 6d 64 4f 3d 7b 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 5b 5d 3b 63 2e 4f 3d 28 72 2c 61 2c 74 2c 64 29 3d 3e 7b 69 66 28 61 29 7b 64 3d 64 7c Data Ascii: (()=>{(()=>{"use strict";var m={},h={};function c(e){var r=h[e];if(r!==void 0)return r.exports;var a=h[e]={id:e,loaded:!1,exports:{}};return m[e].call(a.exports,a,a.exports,c),a.loaded=!0,a.exports}c.m=m,c.amdO={},(()=>{var e=[];c.O=(r,a,t,d)=>{if(a){d=d\|
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 73 69 6f 6e 22 2c 39 36 35 3a 22 6f 70 74 69 6f 6e 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 31 30 32 35 3a 22 64 65 74 61 69 6c 2d 63 72 65 61 74 65 22 2c 31 33 31 31 3a 22 74 65 78 74 2d 61 6e 64 2d 69 6d 61 67 65 2d 32 2d 63 6f 6c 75 6d 6e 2d 63 65 6e 74 65 72 65 64 22 2c 31 33 33 34 3a 22 62 61 6e 6e 65 72 2d 63 72 65 61 74 65 22 2c 31 33 34 32 3a 22 6f 70 74 69 6f 6e 2d 62 75 74 74 6f 6e 67 72 6f 75 70 22 2c 31 34 31 39 3a 22 62 6c 6f 63 6b 2d 73 65 6c 65 63 74 6f 72 2d 6f 76 65 72 6c 61 79 22 2c 31 37 35 36 3a 22 66 65 61 74 75 72 65 64 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 61 72 64 73 22 2c 31 37 38 39 3a 22 6f 70 74 69 6f 6e 2d 67 72 69 64 22 2c 31 38 31 35 3a 22 61 64 64 2d 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 2d 70 61 67 65 22 2c 31 38 33 Data Ascii: sion",965:"option-autocomplete",1025:"detail-create",1311:"text-and-image-2-column-centered",1334:"banner-create",1342:"option-buttongroup",1419:"block-selector-overlay",1756:"featured-categories-cards",1789:"option-grid",1815:"add-store-locator-page",183
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 31 37 31 30 3a 22 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 62 6c 6f 63 6b 6c 61 79 6f 75 74 22 2c 31 31 37 32 30 3a 22 63 6d 69 2d 70 61 67 65 22 2c 31 31 37 39 32 3a 22 68 65 61 64 65 72 2d 37 22 2c 31 31 38 30 34 3a 22 6c 65 61 76 65 2d 70 72 6f 64 75 63 74 2d 72 65 76 69 65 77 2d 63 72 65 61 74 65 22 2c 31 31 38 36 30 3a 22 6c 6f 63 61 74 69 6f 6e 2d 69 6e 66 6f 2d 64 69 61 6c 6f 67 22 2c 31 31 39 30 31 3a 22 66 6f 6f 74 65 72 2d 77 6f 72 6b 65 72 22 2c 31 31 39 34 34 3a 22 73 74 6f 72 79 2d 35 22 2c 31 32 30 36 35 3a 22 66 6f 75 6e 64 65 72 2d 32 22 2c 31 32 30 38 30 3a 22 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 2d 69 6e 66 6f 2d 6d 6f 64 61 6c 22 2c 31 32 35 32 35 3a 22 65 6d 62 65 64 2d 63 6f 64 65 2d 32 22 2c 31 33 30 36 31 3a 22 61 62 6f 75 74 2d 75 Data Ascii: 1710:"option-selectblocklayout",11720:"cmi-page",11792:"header-7",11804:"leave-product-review-create",11860:"location-info-dialog",11901:"footer-worker",11944:"story-5",12065:"founder-2",12080:"store-locator-info-modal",12525:"embed-code-2",13061:"about-u
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 36 30 37 3a 22 67 6c 6f 62 61 6c 2d 63 6f 6e 74 72 6f 6c 73 2d 62 6c 61 64 65 73 22 2c 32 30 36 37 38 3a 22 68 69 67 68 6c 69 67 68 74 2d 38 22 2c 32 30 39 36 37 3a 22 73 74 6f 72 79 2d 32 22 2c 32 31 35 30 30 3a 22 64 65 74 61 69 6c 2d 37 22 2c 32 31 35 31 36 3a 22 72 73 73 2d 66 65 65 64 2d 6c 61 79 6f 75 74 2d 63 6f 6c 75 6d 6e 22 2c 32 31 37 34 39 3a 22 76 69 64 65 6f 2d 6f 70 74 69 6f 6e 73 22 2c 32 31 38 37 30 3a 22 6f 70 74 69 6f 6e 2d 73 6c 69 64 65 72 22 2c 32 32 31 32 37 3a 22 67 69 66 74 2d 63 61 72 64 73 22 2c 32 32 34 30 39 3a 22 76 69 64 65 6f 2d 63 72 65 61 74 65 22 2c 32 32 37 37 30 3a 22 69 6e 73 74 61 67 72 61 6d 2d 63 72 65 61 74 65 22 2c 32 32 38 38 37 3a 22 62 6c 6f 67 2d 62 61 6e 6e 65 72 2d 6c 65 66 74 2d 61 6c 69 67 6e 65 64 22 2c Data Ascii: 607:"global-controls-blades",20678:"highlight-8",20967:"story-2",21500:"detail-7",21516:"rss-feed-layout-column",21749:"video-options",21870:"option-slider",22127:"gift-cards",22409:"video-create",22770:"instagram-create",22887:"blog-banner-left-aligned",
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 32 37 31 31 3a 22 62 61 6e 6e 65 72 2d 39 22 2c 33 32 37 38 32 3a 22 63 61 74 65 67 6f 72 79 2d 70 72 6f 64 75 63 74 73 2d 31 22 2c 33 33 30 36 34 3a 22 66 6f 6f 74 65 72 2d 35 22 2c 33 33 35 33 33 3a 22 64 65 74 61 69 6c 2d 6f 70 74 69 6f 6e 73 22 2c 33 33 39 30 37 3a 22 69 74 65 6d 2d 66 69 6c 74 65 72 69 6e 67 2d 6d 6f 64 61 6c 22 2c 33 34 31 32 30 3a 22 6f 70 74 69 6f 6e 2d 73 74 65 70 70 65 72 22 2c 33 34 32 32 33 3a 22 73 74 6f 72 79 2d 63 72 65 61 74 65 22 2c 33 34 33 30 39 3a 22 64 65 74 61 69 6c 2d 36 22 2c 33 34 33 34 31 3a 22 67 65 6e 65 72 61 6c 2d 73 65 74 74 69 6e 67 73 22 2c 33 34 35 32 34 3a 22 70 72 65 6f 72 64 65 72 2d 64 65 74 61 69 6c 73 2d 64 69 61 6c 6f 67 22 2c 33 35 31 35 31 3a 22 61 64 64 2d 73 74 61 66 66 2d 70 61 67 65 22 2c 33 Data Ascii: 2711:"banner-9",32782:"category-products-1",33064:"footer-5",33533:"detail-options",33907:"item-filtering-modal",34120:"option-stepper",34223:"story-create",34309:"detail-6",34341:"general-settings",34524:"preorder-details-dialog",35151:"add-staff-page",3
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6d 61 67 65 2d 73 70 6c 69 74 2d 69 6d 61 67 65 2d 6c 65 66 74 22 2c 34 33 37 34 30 3a 22 73 69 74 65 2d 73 70 65 65 64 22 2c 34 34 34 36 36 3a 22 6f 70 74 69 6f 6e 2d 74 69 6c 65 67 72 6f 75 70 22 2c 34 34 35 34 30 3a 22 74 65 78 74 2d 61 6e 64 2d 69 6d 61 67 65 2d 32 2d 72 6f 77 22 2c 34 35 30 34 31 3a 22 73 71 75 61 72 65 2d 6d 61 72 6b 65 74 69 6e 67 22 2c 34 35 34 32 36 3a 22 63 61 74 65 72 69 6e 67 2d 72 65 71 75 65 73 74 2d 31 22 2c 34 35 35 34 33 3a 22 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 2d 74 69 6d 65 22 2c 34 35 35 39 38 3a 22 67 61 6c 6c 65 72 79 2d 63 61 72 6f 75 73 65 6c 22 2c 34 35 37 30 33 3a 22 6e 65 77 73 6c 65 74 74 65 72 2d 63 72 65 61 74 65 22 2c 34 35 37 35 38 3a 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 2c 34 35 38 37 33 3a 22 66 6f Data Ascii: mage-split-image-left",43740:"site-speed",44466:"option-tilegroup",44540:"text-and-image-2-row",45041:"square-marketing",45426:"catering-request-1",45543:"option-input-time",45598:"gallery-carousel",45703:"newsletter-create",45758:"integrations",45873:"fo
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 2c 35 34 36 34 33 3a 22 73 63 68 65 64 75 6c 65 2d 6f 72 64 65 72 2d 6d 6f 64 61 6c 22 2c 35 35 32 37 32 3a 22 67 6f 6f 67 6c 65 2d 66 6f 6f 64 2d 6f 72 64 65 72 69 6e 67 22 2c 35 35 34 33 39 3a 22 6e 65 77 73 6c 65 74 74 65 72 2d 32 22 2c 35 35 35 39 39 3a 22 64 6f 6e 61 74 69 6f 6e 2d 74 65 78 74 22 2c 35 36 34 32 32 3a 22 68 65 61 64 65 72 2d 31 22 2c 35 36 36 31 30 3a 22 61 64 64 2d 73 74 61 6e 64 61 72 64 2d 70 61 67 65 22 2c 35 36 36 39 35 3a 22 66 6f 75 6e 64 65 72 2d 34 22 2c 35 37 31 39 38 3a 22 6f 70 74 69 6f 6e 2d 74 79 70 6f 67 72 61 70 68 79 2d 63 68 6f 6f 73 65 72 22 2c 35 37 34 35 37 3a 22 6f 72 64 65 72 2d 6f 6e 6c 69 6e 65 2d 67 72 69 64 2d 6f 70 74 69 6f 6e 73 22 2c 35 37 35 37 36 3a 22 73 70 6c 61 73 68 2d 6d 6f 64 61 6c 2d 68 65 61 64 Data Ascii: ,54643:"schedule-order-modal",55272:"google-food-ordering",55439:"newsletter-2",55599:"donation-text",56422:"header-1",56610:"add-standard-page",56695:"founder-4",57198:"option-typography-chooser",57457:"order-online-grid-options",57576:"splash-modal-head
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 63 6b 65 72 22 2c 36 36 39 33 38 3a 22 74 65 78 74 2d 33 22 2c 36 36 39 35 39 3a 22 66 6f 6f 74 65 72 2d 63 72 65 61 74 65 22 2c 36 36 39 38 30 3a 22 73 65 72 76 69 63 65 2d 6d 65 6e 75 22 2c 36 37 32 37 34 3a 22 6f 70 74 69 6f 6e 2d 6d 61 6e 61 67 65 63 74 61 22 2c 36 37 33 31 35 3a 22 6c 6f 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 2d 74 65 78 74 22 2c 36 37 34 37 36 3a 22 73 65 72 76 69 63 65 73 2d 6c 69 73 74 2d 74 69 67 68 74 2d 67 72 69 64 22 2c 36 37 34 39 31 3a 22 63 75 73 74 6f 6d 2d 71 75 6f 74 65 2d 31 22 2c 36 37 34 39 39 3a 22 66 65 61 74 75 72 65 64 2d 70 72 6f 64 75 63 74 73 2d 6f 70 74 69 6f 6e 73 22 2c 36 37 38 34 35 3a 22 66 65 61 74 75 72 65 64 2d 6d 65 6e 75 2d 69 74 65 6d 73 2d 67 72 69 64 22 2c 36 38 30 30 31 3a 22 70 61 67 65 2d 61 64 Data Ascii: cker",66938:"text-3",66959:"footer-create",66980:"service-menu",67274:"option-managecta",67315:"location-banner-text",67476:"services-list-tight-grid",67491:"custom-quote-1",67499:"featured-products-options",67845:"featured-menu-items-grid",68001:"page-ad
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 61 6c 6c 65 72 79 2d 6d 61 73 6f 6e 72 79 22 2c 37 36 33 30 35 3a 22 70 72 6f 64 75 63 74 2d 72 65 76 69 65 77 73 2d 6f 70 74 69 6f 6e 73 22 2c 37 37 32 31 33 3a 22 62 61 6e 6e 65 72 2d 31 30 22 2c 37 37 32 33 30 3a 22 70 6f 70 75 70 73 22 2c 37 37 36 33 34 3a 22 76 69 64 65 6f 2d 31 22 2c 37 38 31 32 36 3a 22 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 31 22 2c 37 38 34 38 36 3a 22 61 73 73 65 74 73 2d 6d 61 6e 61 67 65 72 2d 6d 6f 64 61 6c 22 2c 37 38 35 36 35 3a 22 73 74 61 66 66 2d 6c 69 73 74 2d 67 72 69 64 22 2c 37 38 37 38 33 3a 22 61 70 70 6f 69 6e 74 6d 65 6e 74 2d 72 65 71 75 65 73 74 2d 63 72 65 61 74 65 22 2c 37 39 31 33 31 3a 22 73 70 61 63 69 6e 67 2d 70 61 6e 65 6c 22 2c 37 39 33 33 34 3a 22 74 65 78 74 2d 61 6e 64 2d 69 6d 61 67 65 2d 73 74 6f 72 Data Ascii: allery-masonry",76305:"product-reviews-options",77213:"banner-10",77230:"popups",77634:"video-1",78126:"testimonial-1",78486:"assets-manager-modal",78565:"staff-list-grid",78783:"appointment-request-create",79131:"spacing-panel",79334:"text-and-image-stor
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 39 31 30 38 3a 22 73 69 6d 69 6c 61 72 2d 69 74 65 6d 73 2d 6f 70 74 69 6f 6e 73 22 2c 38 39 31 33 37 3a 22 6f 70 74 69 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 65 6c 65 63 74 6f 72 22 2c 38 39 31 33 39 3a 22 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 6c 61 79 6f 75 74 22 2c 38 39 36 37 31 3a 22 6f 70 74 69 6f 6e 73 2d 64 65 76 2d 61 70 70 22 2c 38 39 36 39 30 3a 22 67 61 6c 6c 65 72 79 2d 6f 70 74 69 6f 6e 73 22 2c 39 30 30 32 39 3a 22 65 6d 62 65 64 2d 63 6f 64 65 2d 63 72 65 61 74 65 22 2c 39 30 32 38 33 3a 22 73 70 6c 61 73 68 2d 32 22 2c 39 30 35 30 36 3a 22 72 65 76 69 65 77 2d 67 61 6c 6c 65 72 79 2d 6d 6f 64 61 6c 22 2c 39 30 35 36 36 3a 22 61 64 64 72 65 73 73 2d 65 64 69 74 2d 6d 6f 64 61 6c 22 2c 39 30 35 38 38 3a 22 6d 65 73 73 65 6e 67 65 72 Data Ascii: 9108:"similar-items-options",89137:"option-background-selector",89139:"option-selectlayout",89671:"options-dev-app",89690:"gallery-options",90029:"embed-code-create",90283:"splash-2",90506:"review-gallery-modal",90566:"address-edit-modal",90588:"messenger

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	580	OUT	GET /app/website/js/vue-modules.4a41b3ba298bf4563d97.js HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 175768 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Mon, 09 Sep 2024 15:08:33 GMT ETag: "66df0f71-2ae98" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Revision: a56272c59087e89f8a0467cb5556dab5c3e08e6b X-Request-ID: 3796fcbca5905d77a66de555bdc2914f X-W-DC: SFO Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish Age: 1519349 X-Served-By: cache-ewr-kewr1740044-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727493852.288568,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 28 29 3d 3e 7b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 63 6f 6d 5f 77 65 62 73 69 74 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 63 6f 6d 5f 77 65 62 73 69 74 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 39 38 31 5d 2c 7b 34 35 32 32 39 3a 28 74 6e 2c 71 74 2c 4a 65 29 3d 3e 7b 4a 65 2e 64 28 71 74 2c 7b 41 3a 28 29 3d 3e 73 72 7d 29 3b 76 61 72 20 50 65 3d 4a 65 28 31 33 36 39 36 29 2c 65 65 3d 4a 65 2e 6e 28 50 65 29 3b 2f 2a 2a 0a 20 2a 20 76 75 65 2d 6d 65 74 61 20 76 32 2e 34 2e 30 0a 20 2a 20 28 63 29 20 32 30 32 30 0a 20 2a 20 2d 20 44 65 63 6c 61 6e 20 64 65 20 57 65 74 0a 20 2a 20 2d 20 53 c3 a9 62 61 73 74 69 65 6e 20 43 68 6f 70 69 6e 20 28 40 41 74 69 6e 75 78 29 0a Data Ascii: "use strict";(()=>{(self.webpackChunkecom_website=self.webpackChunkecom_website\|\|[]).push([[29981],{45229:(tn,qt,Je)=>{Je.d(qt,{A:()=>sr});var Pe=Je(13696),ee=Je.n(Pe);/** * vue-meta v2.4.0 * (c) 2020 * - Declan de Wet * - Sbastien Chopin (@Atinux)
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 79 65 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 70 29 7b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 70 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 70 2c 68 29 7b 69 66 28 70 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 79 65 28 70 2c 68 29 3b 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 70 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 69 66 28 79 3d 3d 3d 22 4f 62 6a 65 63 74 22 26 26 70 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 79 3d Data Ascii: eturn ye(p)}function et(p){if(typeof Symbol!="undefined"&&Symbol.iterator in Object(p))return Array.from(p)}function jt(p,h){if(p){if(typeof p=="string")return ye(p,h);var y=Object.prototype.toString.call(p).slice(8,-1);if(y==="Object"&&p.constructor&&(y=
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 75 72 6e 20 74 79 70 65 6f 66 20 70 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 70 29 7b 72 65 74 75 72 6e 20 43 28 70 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 70 29 7b 72 65 74 75 72 6e 20 43 28 70 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 70 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 70 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 68 72 28 70 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 58 65 28 77 69 6e 64 6f 77 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 76 61 72 20 Data Ascii: urn typeof p=="undefined"}function st(p){return C(p)==="object"}function Ie(p){return C(p)==="object"&&p!==null}function Jt(p){return typeof p=="function"}function hr(p){return typeof p=="string"}function Ne(){try{return!Xe(window)}catch(p){return!1}}var
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 74 65 64 22 2c 22 64 65 66 65 72 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 65 6e 61 62 6c 65 64 22 2c 22 66 6f 72 6d 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 68 69 64 64 65 6e 22 2c 22 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 22 2c 22 69 6e 65 72 74 22 2c 22 69 73 6d 61 70 22 2c 22 69 74 65 6d 73 63 6f 70 65 22 2c 22 6c 6f 6f 70 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 6e 6f 68 72 65 66 22 2c 22 6e 6f 72 65 73 69 7a 65 22 2c 22 6e 6f 73 68 61 64 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 77 72 61 70 22 2c 22 6f 70 65 6e 22 2c 22 70 61 75 73 65 6f 6e 65 78 69 74 22 2c 22 72 65 61 64 6f 6e 6c 79 22 2c 22 72 65 71 75 69 72 65 64 22 2c 22 72 65 76 65 72 73 65 64 22 2c 22 73 63 6f 70 65 64 22 2c 22 73 65 61 6d 6c 65 73 73 22 Data Ascii: ted","defer","disabled","enabled","formnovalidate","hidden","indeterminate","inert","ismap","itemscope","loop","multiple","muted","nohref","noresize","noshade","novalidate","nowrap","open","pauseonexit","readonly","required","reversed","scoped","seamless"
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 4b 65 79 4e 61 6d 65 3b 79 3d 79 7c 7c 7b 7d 3b 76 61 72 20 6f 3d 5b 22 22 2e 63 6f 6e 63 61 74 28 4c 2c 22 5b 22 29 2e 63 6f 6e 63 61 74 28 46 2c 27 3d 22 27 29 2e 63 6f 6e 63 61 74 28 41 2c 27 22 5d 27 29 2c 22 22 2e 63 6f 6e 63 61 74 28 4c 2c 22 5b 64 61 74 61 2d 22 29 2e 63 6f 6e 63 61 74 28 50 2c 22 5d 22 29 5d 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 79 29 7b 76 61 72 20 76 3d 79 5b 6c 5d 2c 75 3d 76 26 26 76 21 3d 3d 21 30 3f 27 3d 22 27 2e 63 6f 6e 63 61 74 28 76 2c 27 22 27 29 3a 22 22 3b 73 2b 3d 22 5b 64 61 74 61 2d 22 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 75 2c 22 5d 22 29 7d 72 65 74 75 72 6e 20 73 7d 29 3b 72 65 74 75 72 6e 20 54 28 44 28 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c Data Ascii: KeyName;y=y\|\|{};var o=["".concat(L,"[").concat(F,'="').concat(A,'"]'),"".concat(L,"[data-").concat(P,"]")].map(function(s){for(var l in y){var v=y[l],u=v&&v!==!0?'="'.concat(v,'"'):"";s+="[data-".concat(l).concat(u,"]")}return s});return T(D(o.join(", "),
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 2c 74 68 69 73 3d 3d 3d 6f 26 26 6f 2e 24 6f 6e 63 65 28 22 68 6f 6f 6b 3a 62 65 66 6f 72 65 4d 6f 75 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 3d 74 68 69 73 2e 24 65 6c 26 26 74 68 69 73 2e 24 65 6c 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 74 68 69 73 2e 24 65 6c 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 65 72 76 65 72 2d 72 65 6e 64 65 72 65 64 22 29 2c 21 41 26 26 6f 5b 66 65 5d 26 26 6f 5b 66 65 5d 2e 61 70 70 49 64 3d 3d 3d 31 29 7b 76 61 72 20 75 3d 42 28 7b 7d 2c 22 68 74 6d 6c 22 29 3b 41 3d 75 26 26 75 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2e 73 73 72 41 74 74 72 69 62 75 74 65 29 7d 7d 29 2c 21 28 58 65 28 73 5b 68 2e 6b 65 79 4e 61 6d 65 5d 29 7c 7c 73 5b 68 2e 6b 65 79 4e 61 6d 65 5d 3d 3d 3d 6e Data Ascii: ,this===o&&o.$once("hook:beforeMount",function(){if(A=this.$el&&this.$el.nodeType===1&&this.$el.hasAttribute("data-server-rendered"),!A&&o[fe]&&o[fe].appId===1){var u=B({},"html");A=u&&u.hasAttribute(h.ssrAttribute)}}),!(Xe(s[h.keyName])\|\|s[h.keyName]===n
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6c 6c 26 26 74 68 69 73 2e 24 6e 65 78 74 54 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 74 28 68 2c 75 2c 22 69 6e 69 74 22 29 7d 29 2c 75 5b 66 65 5d 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 2c 64 65 6c 65 74 65 20 75 5b 66 65 5d 2e 69 6e 69 74 69 61 6c 69 7a 69 6e 67 2c 21 68 2e 72 65 66 72 65 73 68 4f 6e 63 65 4f 6e 4e 61 76 69 67 61 74 69 6f 6e 26 26 49 2e 61 66 74 65 72 4e 61 76 69 67 61 74 69 6f 6e 26 26 47 65 28 75 29 7d 29 29 7d 29 2c 68 2e 72 65 66 72 65 73 68 4f 6e 63 65 4f 6e 4e 61 76 69 67 61 74 69 6f 6e 26 26 47 65 28 6f 29 29 29 2c 74 68 69 73 2e 24 6f 6e 28 22 68 6f 6f 6b 3a 64 65 73 74 72 6f 79 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 21 74 68 69 73 2e 24 70 61 72 65 6e 74 Data Ascii: ll&&this.$nextTick(function(){return lt(h,u,"init")}),u[fe].initialized=!0,delete u[fe].initializing,!h.refreshOnceOnNavigation&&I.afterNavigation&&Ge(u)}))}),h.refreshOnceOnNavigation&&Ge(o))),this.$on("hook:destroyed",function(){var u=this;!this.$parent
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 5b 2f 3c 2f 67 2c 22 3c 22 5d 2c 5b 2f 3e 2f 67 2c 22 3e 22 5d 2c 5b 2f 22 2f 67 2c 27 22 27 5d 2c 5b 2f 27 2f 67 2c 22 27 22 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 49 74 28 70 2c 68 2c 79 2c 41 29 7b 76 61 72 20 46 3d 68 2e 74 61 67 49 44 4b 65 79 4e 61 6d 65 2c 4c 3d 79 2e 64 6f 45 73 63 61 70 65 2c 50 3d 4c 3d 3d 3d 76 6f 69 64 20 30 3f 66 75 6e 63 74 69 6f 6e 28 24 29 7b 72 65 74 75 72 6e 20 24 7d 3a 4c 2c 6f 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 70 29 7b 76 61 72 20 6c 3d 70 5b 73 5d 3b 69 66 28 4f 28 59 74 2c 73 29 29 7b 6f 5b 73 5d 3d 6c 3b 63 6f 6e 74 69 6e 75 65 7d 76 61 72 20 76 3d 6e 74 5b 30 5d 3b 69 66 28 79 5b 76 5d 26 26 4f 28 79 5b 76 5d 2c 73 29 29 7b 6f 5b 73 5d 3d 6c 3b 63 6f 6e 74 69 6e 75 65 7d 76 61 72 20 75 3d 70 5b 46 5d Data Ascii: [/</g,"<"],[/>/g,">"],[/"/g,'"'],[/'/g,"'"]];function It(p,h,y,A){var F=h.tagIDKeyName,L=y.doEscape,P=L===void 0?function($){return $}:L,o={};for(var s in p){var l=p[s];if(O(Yt,s)){o[s]=l;continue}var v=nt[0];if(y[v]&&O(y[v],s)){o[s]=l;continue}var u=p[F]
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 75 5b 4c 5d 3b 69 66 28 21 24 29 7b 67 72 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a 41 2c 6d 65 74 61 54 65 6d 70 6c 61 74 65 4b 65 79 4e 61 6d 65 3a 4c 2c 63 6f 6e 74 65 6e 74 4b 65 79 4e 61 6d 65 3a 50 7d 2c 75 2c 5f 29 2c 75 2e 74 65 6d 70 6c 61 74 65 3d 21 30 3b 72 65 74 75 72 6e 7d 75 5b 50 5d 7c 7c 67 72 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a 41 2c 6d 65 74 61 54 65 6d 70 6c 61 74 65 4b 65 79 4e 61 6d 65 3a 4c 2c 63 6f 6e 74 65 6e 74 4b 65 79 4e 61 6d 65 3a 50 7d 2c 75 2c 76 6f 69 64 20 30 2c 73 5b 50 5d 29 7d 7d 29 2c 6f 2e 63 6f 6e 63 61 74 28 79 29 29 7d 76 61 72 20 6e 6e 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 79 72 28 70 2c 68 2c 79 29 7b 72 65 74 75 72 6e 20 79 3d 79 7c 7c 7b 7d 2c 68 2e 74 69 74 6c 65 3d 3d 3d 76 6f 69 64 20 30 26 26 64 65 6c 65 74 65 Data Ascii: u[L];if(!$){gr({component:A,metaTemplateKeyName:L,contentKeyName:P},u,_),u.template=!0;return}u[P]\|\|gr({component:A,metaTemplateKeyName:L,contentKeyName:P},u,void 0,s[P])}}),o.concat(y))}var nn=!1;function yr(p,h,y){return y=y\|\|{},h.title===void 0&&delete
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 74 63 68 65 73 28 46 29 26 26 28 4c 3d 5b 70 5d 29 2c 4c 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 50 29 7b 69 66 28 21 50 2e 5f 5f 76 6d 5f 63 62 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 50 2e 5f 5f 76 6d 5f 63 62 3d 21 30 2c 6e 65 28 50 2c 22 6f 6e 6c 6f 61 64 22 29 2c 41 28 50 29 7d 3b 69 66 28 50 2e 5f 5f 76 6d 5f 6c 29 7b 6f 28 29 3b 72 65 74 75 72 6e 7d 50 2e 5f 5f 76 6d 5f 65 76 7c 7c 28 50 2e 5f 5f 76 6d 5f 65 76 3d 21 30 2c 50 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6f 29 29 7d 7d 29 7d 29 7d 76 61 72 20 69 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 72 28 70 2c 68 2c 79 2c 41 2c 46 29 7b 76 61 72 20 4c 3d 68 7c 7c 7b 7d 2c 50 3d 4c 2e 61 74 74 72 69 62 75 74 65 2c 6f 3d 46 2e 67 65 Data Ascii: tches(F)&&(L=[p]),L.forEach(function(P){if(!P.__vm_cb){var o=function(){P.__vm_cb=!0,ne(P,"onload"),A(P)};if(P.__vm_l){o();return}P.__vm_ev\|\|(P.__vm_ev=!0,P.addEventListener("load",o))}})})}var it={};function ar(p,h,y,A,F){var L=h\|\|{},P=L.attribute,o=F.ge

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	581	OUT	GET /app/website/js/languages/en.a42b845eb88c3e4055a9.js HTTP/1.1 Host: cdn3.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	717	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1208807 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Thu, 26 Sep 2024 20:38:43 GMT ETag: "66f5c653-1271e7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Revision: 7bcc5293a4c7042494c1f321d921399207e2b136 X-Request-ID: fe8bb0b89ae64164221557df94d747af X-W-DC: SFO Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Via: 1.1 varnish Age: 105055 X-Served-By: cache-ewr-kewr1740076-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727493852.288771,VS0,VE3 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 63 6f 6d 5f 77 65 62 73 69 74 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 65 63 6f 6d 5f 77 65 62 73 69 74 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 38 33 38 5d 2c 7b 39 30 37 30 36 3a 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 5f 6c 6f 63 61 6c 65 53 74 72 69 6e 67 73 3d 7b 22 61 69 2e 63 68 61 72 61 63 74 65 72 73 2d 6c 65 66 74 22 3a 22 25 28 6e 75 6d 62 65 72 29 73 20 63 68 61 72 61 63 74 65 72 73 20 6c 65 66 74 22 2c 22 61 69 2e 64 69 73 63 6c 61 69 6d 65 72 2e 62 72 69 65 66 22 3a 22 54 68 69 73 20 63 6f 6e 74 65 6e 74 20 77 61 73 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 4f 70 65 6e 41 49 2e 20 41 6c 77 61 79 73 20 72 65 76 69 65 77 20 62 65 66 6f 72 65 Data Ascii: (()=>{(self.webpackChunkecom_website=self.webpackChunkecom_website\|\|[]).push([[99838],{90706:()=>{window._localeStrings={"ai.characters-left":"%(number)s characters left","ai.disclaimer.brief":"This content was generated using OpenAI. Always review before
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 74 69 6f 6e 22 3a 22 53 74 6f 72 79 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 22 61 69 2e 74 6f 6e 65 22 3a 22 54 6f 6e 65 22 2c 22 61 69 2e 74 6f 6e 65 2e 63 6f 6e 63 69 73 65 22 3a 22 43 6f 6e 63 69 73 65 22 2c 22 61 69 2e 74 6f 6e 65 2e 65 6e 67 61 67 69 6e 67 22 3a 22 45 6e 67 61 67 69 6e 67 22 2c 22 61 69 2e 74 6f 6e 65 2e 70 72 6f 66 65 73 73 69 6f 6e 61 6c 22 3a 22 50 72 6f 66 65 73 73 69 6f 6e 61 6c 22 2c 22 61 70 70 6f 69 6e 74 6d 65 6e 74 2d 6d 6f 64 61 6c 2e 61 70 70 6f 69 6e 74 6d 65 6e 74 73 2d 6e 6f 74 2d 73 65 74 75 70 22 3a 22 57 65 5c 75 32 30 31 39 72 65 20 6e 6f 74 20 73 65 74 20 75 70 20 74 6f 20 61 63 63 65 70 74 20 61 70 70 6f 69 6e 74 6d 65 6e 74 73 20 6a 75 73 74 20 79 65 74 2e 22 2c 22 61 70 70 6f 69 6e 74 6d 65 6e 74 73 2e 61 70 70 Data Ascii: tion":"Story suggestion","ai.tone":"Tone","ai.tone.concise":"Concise","ai.tone.engaging":"Engaging","ai.tone.professional":"Professional","appointment-modal.appointments-not-setup":"We\u2019re not set up to accept appointments just yet.","appointments.app
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6e 65 72 2e 65 78 70 69 72 65 64 2e 70 6c 61 6e 2e 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 72 20 25 28 70 6c 61 6e 4e 61 6d 65 29 73 20 70 6c 61 6e 20 68 61 73 20 65 6e 64 65 64 2e 22 2c 22 62 61 6e 6e 65 72 2e 67 65 74 2e 63 75 73 74 6f 6d 2e 64 6f 6d 61 69 6e 22 3a 22 47 65 74 20 61 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 22 2c 22 62 61 6e 6e 65 72 2e 6a 61 70 61 6e 2e 63 68 65 63 6b 6f 75 74 22 3a 22 57 61 6e 74 20 74 6f 20 73 74 61 72 74 20 74 6f 20 73 65 6c 6c 20 6f 6e 6c 69 6e 65 3f 20 50 6c 65 61 73 65 20 67 6f 20 74 6f 20 25 28 63 68 65 63 6b 6f 75 74 4c 69 6e 6b 29 73 20 74 6f 20 65 6e 61 62 6c 65 20 6f 6e 6c 69 6e 65 20 6f 72 64 65 72 73 2e 22 2c 22 62 61 6e 6e 65 72 2e 6a 61 70 61 6e 2e 63 68 65 63 6b 6f 75 74 2e 63 74 61 22 3a 22 43 68 65 63 Data Ascii: ner.expired.plan.message":"Your %(planName)s plan has ended.","banner.get.custom.domain":"Get a custom domain","banner.japan.checkout":"Want to start to sell online? Please go to %(checkoutLink)s to enable online orders.","banner.japan.checkout.cta":"Chec
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 61 72 63 68 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 73 65 63 74 69 6f 6e 2d 73 74 79 6c 65 2d 6c 61 62 65 6c 22 3a 22 53 65 63 74 69 6f 6e 20 73 74 79 6c 65 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 73 68 6f 70 2d 61 6c 6c 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 22 3a 22 53 68 6f 70 20 4e 6f 77 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 73 6f 63 69 61 6c 2e 61 63 74 69 6f 6e 2d 6c 61 62 65 6c 22 3a 22 43 6f 6e 6e 65 63 74 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 73 6f 63 69 61 6c 2e 63 6f 6e 6e 65 63 74 65 64 2d 6c 61 62 65 6c 22 3a 22 53 6f 63 69 61 6c 20 69 63 6f 6e 73 20 63 6f 6e 6e 65 63 74 65 64 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 73 6f 63 69 61 6c 2e 64 61 72 6b 2d 74 65 78 74 2d 6c 61 62 Data Ascii: earch","block-options.section-style-label":"Section style","block-options.shop-all-button-default":"Shop Now","block-options.social.action-label":"Connect","block-options.social.connected-label":"Social icons connected","block-options.social.dark-text-lab
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 74 2e 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 77 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2e 6e 65 77 65 73 74 2d 74 6f 70 2e 63 68 65 63 6b 62 6f 78 2e 6c 61 62 65 6c 22 3a 22 50 6c 61 63 65 20 6e 65 77 65 73 74 20 69 6d 61 67 65 73 20 6f 6e 20 74 68 65 20 74 6f 70 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 77 2d 69 6d 61 67 65 2e 6d 6f 64 61 6c 2e 61 64 64 2d 74 69 74 6c 65 22 3a 22 41 64 64 20 69 6d 61 67 65 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 77 2d 69 6d 61 67 65 2e 6d 6f 64 61 6c 2e 72 65 70 6c 61 63 65 2d 74 69 74 6c 65 22 3a 22 52 65 70 6c 61 63 65 20 69 6d 61 67 65 22 2c 22 62 6c 6f 63 6b 2d 6f 70 74 69 6f 6e 73 2e 77 2d 76 69 64 65 6f 2e 64 65 6c 65 74 65 2e 62 75 74 74 6f 6e 2e 74 65 78 74 22 3a 22 44 65 6c 65 74 65 22 Data Ascii: t.","block-options.w-collection.newest-top.checkbox.label":"Place newest images on the top","block-options.w-image.modal.add-title":"Add image","block-options.w-image.modal.replace-title":"Replace image","block-options.w-video.delete.button.text":"Delete"
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 65 72 2e 68 65 6c 70 66 75 6c 2d 69 6e 66 6f 2d 68 65 61 64 65 72 22 3a 22 48 65 6c 70 66 75 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 2e 66 6f 6f 74 65 72 2e 72 65 74 75 72 6e 73 2d 70 6f 6c 69 63 79 22 3a 22 52 65 74 75 72 6e 73 20 50 6f 6c 69 63 79 22 2c 22 63 68 65 63 6b 6f 75 74 2e 66 6f 6f 74 65 72 2e 73 65 63 75 72 65 2d 63 68 65 63 6b 6f 75 74 22 3a 22 53 65 63 75 72 65 20 63 68 65 63 6b 6f 75 74 20 62 79 20 53 71 75 61 72 65 22 2c 22 63 68 65 63 6b 6f 75 74 2e 66 6f 6f 74 65 72 2e 73 68 69 70 70 69 6e 67 2d 70 6f 6c 69 63 79 22 3a 22 53 68 69 70 70 69 6e 67 20 50 6f 6c 69 63 79 22 2c 22 63 68 65 63 6b 6f 75 74 2e 67 65 6e 65 72 69 63 2d 65 72 72 6f 72 22 3a 22 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 73 6f Data Ascii: er.helpful-info-header":"Helpful Information","checkout.footer.returns-policy":"Returns Policy","checkout.footer.secure-checkout":"Secure checkout by Square","checkout.footer.shipping-policy":"Shipping Policy","checkout.generic-error":"We're sorry, but so
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 6d 69 73 73 2d 6d 6f 64 61 6c 22 3a 22 47 6f 74 20 69 74 22 2c 22 63 68 65 63 6b 6f 75 74 2e 70 61 79 6d 65 6e 74 2d 65 72 72 6f 72 2d 6d 6f 64 61 6c 2e 63 6f 6e 74 65 6e 74 22 3a 22 4c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 72 20 63 61 72 64 20 77 61 73 20 64 65 63 6c 69 6e 65 64 2e 20 54 72 79 20 61 67 61 69 6e 20 6f 72 20 75 73 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 2e 22 2c 22 63 68 65 63 6b 6f 75 74 2e 70 61 79 6d 65 6e 74 2d 65 72 72 6f 72 2d 6d 6f 64 61 6c 2e 74 69 74 6c 65 22 3a 22 43 61 72 64 20 44 65 63 6c 69 6e 65 64 22 2c 22 63 68 65 63 6b 6f 75 74 2e 70 61 79 6d 65 6e 74 2e 61 64 64 2d 74 69 70 22 3a 22 41 64 64 20 74 69 70 22 2c 22 63 68 65 63 6b 6f 75 74 2e 70 61 79 6d 65 6e 74 2e 63 68 61 6e 67 Data Ascii: miss-modal":"Got it","checkout.payment-error-modal.content":"Looks like your card was declined. Try again or use a different payment method.","checkout.payment-error-modal.title":"Card Declined","checkout.payment.add-tip":"Add tip","checkout.payment.chang
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 72 79 2e 74 61 78 65 73 22 3a 22 54 61 78 65 73 22 2c 22 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 61 63 63 65 6e 74 2d 6c 61 62 65 6c 22 3a 22 41 63 63 65 6e 74 22 2c 22 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 61 64 64 2d 63 6f 6c 6f 72 22 3a 22 41 64 64 22 2c 22 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 62 72 61 6e 64 2d 6c 61 62 65 6c 22 3a 22 59 6f 75 72 20 63 6f 6c 6f 72 73 22 2c 22 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 2d 77 61 72 6e 69 6e 67 2d 70 6f 70 6f 76 65 72 22 3a 22 54 68 69 73 20 63 6f 6c 6f 72 20 77 6f 6e 27 74 20 62 65 20 6c 65 67 69 62 6c 65 20 6f 6e 20 79 6f 75 72 20 62 61 63 6b 67 72 6f 75 6e 64 22 2c 22 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 63 6f 6c 6f 72 2d 6c 61 62 65 6c 22 3a 22 43 6f 6c 6f 72 Data Ascii: ry.taxes":"Taxes","color-picker.accent-label":"Accent","color-picker.add-color":"Add","color-picker.brand-label":"Your colors","color-picker.color-contrast-warning-popover":"This color won't be legible on your background","color-picker.color-label":"Color
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 74 65 54 6f 29 73 22 2c 22 63 6f 6d 6d 6f 6e 2e 69 74 65 6d 22 3a 22 49 74 65 6d 22 2c 22 63 6f 6d 6d 6f 6e 2e 6d 6f 72 65 22 3a 22 4d 6f 72 65 22 2c 22 63 6f 6d 6d 6f 6e 2e 70 6c 61 6e 73 2e 6c 61 62 65 6c 73 2e 62 75 73 69 6e 65 73 73 22 3a 22 42 75 73 69 6e 65 73 73 20 50 6c 61 6e 22 2c 22 63 6f 6d 6d 6f 6e 2e 70 6c 61 6e 73 2e 6c 61 62 65 6c 73 2e 63 6f 6e 6e 65 63 74 22 3a 22 43 6f 6e 6e 65 63 74 20 50 6c 61 6e 22 2c 22 63 6f 6d 6d 6f 6e 2e 70 6c 61 6e 73 2e 6c 61 62 65 6c 73 2e 66 72 65 65 22 3a 22 46 72 65 65 20 50 6c 61 6e 22 2c 22 63 6f 6d 6d 6f 6e 2e 70 6c 61 6e 73 2e 6c 61 62 65 6c 73 2e 66 72 65 65 2d 74 72 69 61 6c 22 3a 22 46 72 65 65 20 54 72 69 61 6c 22 2c 22 63 6f 6d 6d 6f 6e 2e 70 6c 61 6e 73 2e 6c 61 62 65 6c 73 2e 70 65 72 66 6f 72 6d Data Ascii: teTo)s","common.item":"Item","common.more":"More","common.plans.labels.business":"Business Plan","common.plans.labels.connect":"Connect Plan","common.plans.labels.free":"Free Plan","common.plans.labels.free-trial":"Free Trial","common.plans.labels.perform
2024-09-28 03:24:12 UTC	1378	IN	Data Raw: 20 6f 6e 20 3c 61 20 68 72 65 66 3d 22 25 28 6c 69 6e 6b 29 73 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 25 28 6c 69 6e 6b 54 65 78 74 29 73 3c 2f 61 3e 2e 27 2c 22 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2e 63 6f 6f 6b 69 65 62 6f 74 2e 75 70 73 65 6c 6c 2e 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 70 67 72 61 64 65 20 74 6f 20 43 6f 6f 6b 69 65 62 6f 74 20 50 72 65 6d 69 75 6d 20 28 61 20 73 65 70 61 72 61 74 65 20 6d 6f 6e 74 68 6c 79 20 70 6c 61 6e 20 66 72 6f 6d 20 53 71 75 61 72 65 20 4f 6e 6c 69 6e 65 29 20 74 6f 20 66 75 6c 6c 79 20 63 75 73 74 6f 6d 69 7a 65 20 79 6f 75 72 20 62 61 6e 6e 65 72 20 61 6e 64 20 67 65 74 20 61 64 64 69 74 69 6f 6e 61 6c 20 Data Ascii: on <a href="%(link)s" rel="noopener noreferrer" target="_blank">%(linkText)s</a>.',"cookie-consent.cookiebot.upsell.description":"Upgrade to Cookiebot Premium (a separate monthly plan from Square Online) to fully customize your banner and get additional

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:24:12 UTC	552	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://att-online-2022.square.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:24:12 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75006 Server: nginx Content-Type: application/javascript Last-Modified: Mon, 23 Sep 2024 23:02:21 GMT ETag: "66f1f37d-124fe" Expires: Tue, 08 Oct 2024 08:11:09 GMT Cache-Control: max-age=1209600 X-Host: grn22.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 03:24:12 GMT Age: 328383 X-Served-By: cache-sjc10061-SJC, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 234, 1 X-Timer: S1727493852.300842,VS0,VE3 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 03:24:12 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 67 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 6a 29 7b 69 66 28 21 67 5b 6e 5d 29 7b 69 66 28 21 62 5b 6e 5d 29 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 6a 26 26 69 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 21 30 29 7d 69 66 28 61 29 7b 72 65 74 75 72 6e 20 61 28 6e 2c 21 30 29 7d 76 61 72 20 6d 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 6d 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6d 7d 76 61 72 20 68 3d 67 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 62 5b 6e 5d 5b 30 5d 2e Data Ascii: (function e(b,g,d){function c(n,j){if(!g[n]){if(!b[n]){var i=typeof require=="function"&&require;if(!j&&i){return i(n,!0)}if(a){return a(n,!0)}var m=new Error("Cannot find module '"+n+"'");throw m.code="MODULE_NOT_FOUND",m}var h=g[n]={exports:{}};b[n][0].
2024-09-28 03:24:12 UTC	16384	IN	Data Raw: 6a 29 3b 76 2e 61 64 64 28 22 65 22 2c 22 70 76 22 29 3b 76 2e 61 64 64 28 22 75 72 6c 22 2c 75 29 3b 76 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 76 2e 61 64 64 28 22 72 65 66 72 22 2c 73 29 3b 72 65 74 75 72 6e 20 69 28 76 2c 72 2c 71 29 7d 2c 74 72 61 63 6b 50 61 67 65 50 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 74 2c 78 2c 79 2c 75 2c 72 2c 7a 2c 71 2c 76 29 7b 76 61 72 20 77 3d 67 2e 70 61 79 6c 6f 61 64 42 75 69 6c 64 65 72 28 6a 29 3b 77 2e 61 64 64 28 22 65 22 2c 22 70 70 22 29 3b 77 2e 61 64 64 28 22 75 72 6c 22 2c 73 29 3b 77 2e 61 64 64 28 22 70 61 67 65 22 2c 74 29 3b 77 2e 61 64 64 28 22 72 65 66 72 22 2c 78 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 69 78 22 2c 79 29 3b 77 2e 61 64 64 28 22 70 70 5f 6d 61 78 22 2c 75 29 3b 77 2e 61 64 64 Data Ascii: j);v.add("e","pv");v.add("url",u);v.add("page",t);v.add("refr",s);return i(v,r,q)},trackPagePing:function(s,t,x,y,u,r,z,q,v){var w=g.payloadBuilder(j);w.add("e","pp");w.add("url",s);w.add("page",t);w.add("refr",x);w.add("pp_mix",y);w.add("pp_max",u);w.add
2024-09-28 03:24:12 UTC	16384	IN	Data Raw: 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 6a 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 77 68 69 6c 65 28 6a 3e 3d 30 29 7b 76 61 72 20 6f 3d 6e 2e 73 6c 69 63 65 28 6a 2c 6e 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 66 2e 63 6f 6f 6b 69 65 28 72 2c 70 2c 30 2c 22 2f 22 2c 6f 29 3b 69 66 28 66 2e 63 6f 6f 6b 69 65 28 72 29 3d 3d 3d 70 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 72 2c 6f 29 3b 76 61 72 20 71 3d 64 2e 67 65 74 43 6f 6f 6b 69 65 73 57 69 74 68 50 72 65 66 69 78 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 64 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 71 5b 6d 5d 2c 6f 29 7d 72 65 74 75 72 6e 20 6f 7d 6a 2d 3d 31 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 Data Ascii: stname.split(".");var j=n.length-1;while(j>=0){var o=n.slice(j,n.length).join(".");f.cookie(r,p,0,"/",o);if(f.cookie(r)===p){d.deleteCookie(r,o);var q=d.getCookiesWithPrefix(l);for(var m=0;m<q.length;m++){d.deleteCookie(q[m],o)}return o}j-=1}return window
2024-09-28 03:24:12 UTC	16384	IN	Data Raw: 3d 6f 3b 41 2e 66 69 6c 74 65 72 3d 44 3b 41 2e 66 6f 72 45 61 63 68 3d 61 78 3b 41 2e 66 6f 72 49 6e 3d 61 69 3b 0a 09 41 2e 66 6f 72 4f 77 6e 3d 59 3b 41 2e 6b 65 79 73 3d 4a 3b 41 2e 6d 61 70 3d 78 3b 41 2e 6d 61 70 56 61 6c 75 65 73 3d 61 68 3b 41 2e 70 72 6f 70 65 72 74 79 3d 61 71 3b 41 2e 63 6f 6c 6c 65 63 74 3d 78 3b 41 2e 65 61 63 68 3d 61 78 3b 41 2e 65 78 74 65 6e 64 3d 61 43 3b 41 2e 73 65 6c 65 63 74 3d 44 3b 41 2e 63 6c 6f 6e 65 3d 42 3b 41 2e 66 69 6e 64 3d 61 52 3b 41 2e 69 64 65 6e 74 69 74 79 3d 54 3b 41 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 67 3b 41 2e 69 73 41 72 72 61 79 3d 66 3b 41 2e 69 73 44 61 74 65 3d 6d 3b 41 2e 69 73 45 6d 70 74 79 3d 70 3b 41 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 61 41 3b 41 2e 69 73 4e 75 6c 6c 3d 61 51 3b 41 Data Ascii: =o;A.filter=D;A.forEach=ax;A.forIn=ai;A.forOwn=Y;A.keys=J;A.map=x;A.mapValues=ah;A.property=aq;A.collect=x;A.each=ax;A.extend=aC;A.select=D;A.clone=B;A.find=aR;A.identity=T;A.isArguments=g;A.isArray=f;A.isDate=m;A.isEmpty=p;A.isFunction=aA;A.isNull=aQ;A
2024-09-28 03:24:12 UTC	9470	IN	Data Raw: 74 22 5d 3d 62 75 2e 69 73 42 6f 74 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 50 72 6f 78 69 65 64 22 5d 3d 62 75 2e 69 73 50 72 6f 78 69 65 64 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 54 6f 72 22 5d 3d 62 75 2e 69 73 54 6f 72 3b 76 61 72 20 62 71 3d 62 75 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 7b 7d 3b 62 73 2e 64 65 76 69 63 65 5b 22 69 73 49 6e 63 6f 67 6e 69 74 6f 22 5d 3d 62 71 2e 62 72 6f 77 73 65 72 48 61 73 49 6e 63 6f 67 6e 69 74 6f 45 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 69 6f 2e 61 75 67 75 72 2e 73 6e 6f 77 70 6c 6f 77 2f 69 64 65 6e 74 69 74 79 5f 6c 69 74 65 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 30 22 2c 64 61 74 61 3a 62 73 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 69 66 28 Data Ascii: t"]=bu.isBot;bs.device["isProxied"]=bu.isProxied;bs.device["isTor"]=bu.isTor;var bq=bu.fingerprint\|\|{};bs.device["isIncognito"]=bq.browserHasIncognitoEnabled;return{schema:"iglu:io.augur.snowplow/identity_lite/jsonschema/1-0-0",data:bs}}}function bh(){if(