e-commerce shopping

technology software

corporate

English

_dd_s

XSRF-TOKEN

PublishedSiteSession

publishedsite-xsrf

_snow_id.f9b5

customer_session

customer_xsrf

websitespring-xsrf

_snow_ses.f9b5

Within the .site top-level domain, 'trezorstart-ios-eng.square.site' is registered and includes subdomain 'trezorstart-ios-eng'. The registrable portion 'square' spans 6 characters with 3 vowels and 3 consonants. It segments into 1 word: square. No strong language cues emerged from the frequency lists.

html/c1/46/c146ecd3-f8de-40e3-9ad5-00d3185a11d5_fallback.html.gz

Trezor.io/Start® — Starting Up Your Device | Trezor® | Trezor Suite

html/c1/46/c146ecd3-f8de-40e3-9ad5-00d3185a11d5.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

script-src 'report-sample' 'nonce-MiLY6NFEv7EaKl6Edz-MEw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XdGTXeHiFnMVSBz7TtiIh..Vwl_KNW8l7HTN6BI6xz0-1763074546-1.0.1.1-8EdV0n1kMh3hnFLtgXQ_Kg7jwkG1dasiK7qr81x2OcWpT6vam7djWvOFGTrPJvJShBPCRSxITx2TqNKi1nkg7MxrBU0WzGCyWkCcj1qzcwwAeOAYYQjSK1KHmJqS0ESl3LzI530a61GebphSWAnQkCY21dQFXg857EXSVGSeM0v2P16rBjm3VHyMnhWRWxVw.MUyO_uanmkIGtD0UJeNlw; report-to cf-csp-endpoint

multipart/form-data; boundary=----WebKitFormBoundaryuKtnApC1qZWA2KVf

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

multipart/form-data; boundary=----WebKitFormBoundarylPRXNqRz9lc08JY5

a-i554w4t2pl53

reCAPTCHA

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width, initial-scale=1, maximum-scale=1

viewport

generator

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

theme-color

msapplication-TileColor

/uploads/b/de695310-bf0b-11f0-a724-eb58d514390d/icon_180x180_ios_NTgxNz.png?width=144

msapplication-TileImage

Start strong at Trezor.io/start. Safeguard your investments, set up your Trezor wallet, and take control of your crypto journey .

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


        window.dataLayer = window.dataLayer || [];
        function gtag(){dataLayer.push(arguments);}
        gtag('js', new Date());
    


    window.__DYNAMIC_BOOTSTRAP__ ??= {};

    Object.assign(window.__DYNAMIC_BOOTSTRAP__, {
        featureFlags: {"ecom.website.deprecated-layouts":false,"marketing-enable-drive-repeat-purchase-campaign":true,"ecom.website.facebook-food":true,"ecom.website.theme-export":false,"ecom.website.chamber-via-fastly":true,"ecom.square-online-published-catalog-cache-version":"2023-11-13","ecom.checkout.open_tabs":true,"ecom.website.photo-reviews":true,"ecom.checkout.cmi-sentry-integration":true,"ecom.checkout.cmi.bootstrap-tracking-snowplow":true,"ecom.checkout.cmi.bootstrap-tracking-ga":true,"ecom.website.order-confirmation-page.website-redirect":true,"ecom.checkout.cmi.locale-view-splitting":true,"ecom.checkout.open_tabs_gc_coupon":true,"ecom.cmi-cart":true,"ecom.checkout.cmi.theme-fonts":false,"ecom-fulfillment-api-v-2":false,"ecom.omnichannel-discounts-frontend":true,"ecom.omnichannel-discounts-category-api":false,"ecom-improved-tipping-experience":true,"ecom.splash.loyalty":true,"ecom.website.published-site.datadog-rum":true,"ecom.website.editor.datadog-rum":true,"ecom-website-published-site-datadog-rum-bot-filter":true,"ecom-use-tracking-inventory":false,"ecom.image-controls.width-fix":true,"ecom.gradient-backgrounds":true,"ecom.website.form-fraud-blocking":true,"ecom.website.form-fraud-auto-ban":true,"ecom.website.code-editor":false,"ecom.shopping.pdp-layouts-m1":true,"ecom.chamber.subscriptions":true,"ecom.tuba.subscriptions-paid-shipping-rates":true,"ecom-cko-enhanced-logging":true,"ecom-cko-unified-logging":true,"ecom.shopping.so-coupons-sunset-integrations":true,"ecom.order-online-text-layouts":true,"ecom.appointment-improvements":true,"ecom.appointment-improvements-m2":true,"ecom.tuba.committed-inventory-m1":true,"ecom.splash-improvements":true,"ecom-themes-onboarding":true,"ecom.shopping.featured-categories-paid-layouts":true,"ecom.website.ai-text.short-form":true,"ecom.website.ai-text.long-form":true,"ecom.website.metered-request.override":false,"ecom.website.async-create-theme":false,"ecom.chamber.spi.serve-items":true,"ecom.can_use_cart_sharing":true,"ecom.website.ai.editor-prototype":false,"ecom.website.ai.page-seo":false,"ecom.appointment-direct-booking":true,"ecom-service-cutover-fe-request-augmentations":true,"ecom.catalog.so-item-library-deprecation-3":true,"ecom.kiosk-photo-card":true,"ecom.website.system-page.cart":false,"ecom-enable-kiosk-large-catalog-layout":false,"ecom-hide-instagram":false,"ecom-enable-kiosk-item-preloading":true,"ecom-brand-api-sync":true,"ecom.service-cutover.enable-tuba-traffic":true,"ecom-show-order-online":true,"ecom-website-combos":true,"websdk-use-new-afterpay-buttons":true,"ecom-checkout-should-check-is-decouple-checkout":true,"ecom-prime-use-store-info-v29":true,"ecom-checkout-decouple-open-tabs":true,"ecom-checkout-force-pci-compliance":false,"ecom-website-hide-food-beverage-themes":false,"ecom-orbit-to-monochrome":true,"ecom-website-fix-dine-in-location-selection":true},
    });



        window.stopSiteLoadingAnimation = () => {
            const loadingElement = document.querySelector('.loading-view');
            loadingElement?.remove();
        };
    


    /**
     * PCI Compliance Flag
     *
     * This flag indicates if scripts have been filtered for PCI compliance (OpenTabs SSO Checkout route).
     * This value is set only for buyer dashboard/site view to prevent infinite loading loops.
     *
     * Do NOT include this file in editor-frame.blade.php as it affects seller dashboard.
     */
    window.IS_PCI_SCRIPTS_FILTERED = false;



    // used for editor-frame and pub site bootstrap
    window.APP_ENV = 'production';
    window.APP_ORIGIN = 'https://square.online';
    window.APP_URL = 'https://www.weebly.com';
    window.ASSET_BASE = '/app/website';
    window.ASSETS_PUBLIC_PATH = 'https://cdn3.editmysite.com/app/website/';
    window.CMS_API_PATH ='/app/website/cms';
    window.DEPRECATED_IMAGE_HOST = 'https://images.editor.website';
    window.FRAME_ORIGIN = 'https://sandbox.square.online';
    window.GENERATE_GOOGLE_MAP_BASE = 'https://www.editmysite.com';
    window.IMAGE_HOST = 'https://ec456d5f3591e622b122.cdn6.editmysite.com';
    window.IS_DRAFT = false;
    window.IS_MAGIC_MIRROR = false;
    window.IS_THEME_PREVIEW = false;
    window.IS_ENHANCED_PREVIEW = false;
    window.DRAFT_ORIGIN = 'https://drafts.editmysite.com';
    window.PUBLISHED_CMS_API_PREFIX = '/app/cms';
    window.SENTRY_DSN = 'https://13e49d785d8d4f828038b6136f3b48ba@sentry.io/1263158';
    window.RELEASE = 'prime-bb3d22e';
    window.URL_BASE = '';
    window.XSRF_COOKIE_NAME = 'publishedsite-xsrf';
    window.FASTLY_URL_BASE = 'https://cdn5.editmysite.com';
    window.SQUARE_WEB_PAYMENTS_SDK = 'https://web.squarecdn.com/v1/square.js'
    window.PUBLIC_SQUARE_URL_BASE = 'squareup.com';
    window.PUBLIC_SQUARE_APPTS_URL_BASE = 'app.squareup.com';
    window.ENABLE_FRONTEND_LOCAL_DEV_CACHE = '';
    window.GOOGLE_TAG_DEVELOPER_ID = 'developer_id.dOTM2Yj';
    window.IS_SQUARE_GO = false;

            window.IS_PUBLISHED_MAGIC_MIRROR = false;
    
    // state
    window.SUBDOMAIN_BASE = 'square.site';




    (function (p, l, o, w, i, n, g) {
    var id = i + '-script';
    if (!l.getElementById(i)) {
        n = l.createElement(o);
        g = l.getElementsByTagName(o)[0];
        n.id = id;
        n.async = 1;
        n.src = w;
        g.parentNode.insertBefore(n, g);
    }
})(window, document, "script", "https://cdn3.editmysite.com/app/website/static/js/wsnbn/snowday262.js", "snowday");


Google authentication and security services

Google

Datadog Real User Monitoring and Application Performance Monitoring

Datadog

⚡ Medium Risk - http://trezorstart-ios-eng.square.site/

Requests	IP Address	Location	AS Autonomous System
14	74.115.51.7	Unknown	Unknown
3	3.233.158.111	Unknown	Unknown
3	35.186.247.156	Unknown	Unknown
3	162.159.136.66	Unknown	Unknown
3	146.75.121.49	Unknown	Unknown
3	142.250.185.99	Unknown	Unknown
3	3.233.158.112	Unknown	Unknown
3	162.159.137.66	Unknown	Unknown
3	172.217.18.4	Unknown	Unknown
3	142.250.185.195	Unknown	Unknown
101	30	-	-

Security Scan Report: trezorstart-ios-eng.square.site

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History