endpoints.path: /
endpoints.endpoint_type: HTTP
endpoints.scan_time: 2025-10-12T14:07:24.040240
endpoints.uri: https://www.pandayan.vendhq.com/
endpoints.protocol: HTTP/1.1
endpoints.status_reason: Moved Temporarily
endpoints.key: Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Server-Timing
endpoints.headers: rid;desc="6967819653d57b59770e0273"
endpoints.key: Location
endpoints.headers: /signin?return=%2F
endpoints.key: X-Frame-Options
endpoints.headers: SAMEORIGIN
endpoints.key: X-Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Connection
endpoints.headers: keep-alive
endpoints.key: Server
endpoints.headers: openresty
endpoints.key: Content-Length
endpoints.headers: 142
endpoints.key: Vend-Ingress
endpoints.headers: duke-171fd7dd9982
endpoints.key: Date
endpoints.headers: <REDACTED>
endpoints.key: Content-Type
endpoints.headers: text/html
endpoints.key: Vend-RID
endpoints.headers: 6967819653d57b59770e0273
endpoints.key: Vend-Canary
endpoints.headers: __NOCANARY__
endpoints.key: X-WebKit-CSP
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Strict-Transport-Security
endpoints.headers: max-age=31536000; includeSubDomains
endpoints.html_tags: <title>302 Found</title>
endpoints.body: <html>
  <head><title>302 Found</title></head>
  <body>
  <center><h1>302 Found</h1></center>
  <hr><center>openresty</center>
  </body>
  </html>
  
endpoints.html_title: 302 Found
endpoints.supported_versions: HTTP/1.1 HTTP/2
endpoints.banner: HTTP/1.1 302 Moved Temporarily
  Date:  <REDACTED>
  Content-Type: text/html
  Content-Length: 142
  Connection: keep-alive
  Server: openresty
  Location: /signin?return=%2F
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Vend-RID: 6967819653d57b59770e0273
  Vend-Ingress: duke-171fd7dd9982
  Vend-Canary: __NOCANARY__
  Server-Timing: rid;desc="6967819653d57b59770e0273"
  Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-Frame-Options: SAMEORIGIN
  X-WebKit-CSP: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  
endpoints.ip: 44.232.55.122
endpoints.path: /signin
endpoints.endpoint_type: HTTP
endpoints.scan_time: 2025-10-12T14:07:47.304494
endpoints.uri: https://www.pandayan.vendhq.com/signin
endpoints.protocol: HTTP/1.1
endpoints.status_reason: Moved Permanently
endpoints.key: X-Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Server
endpoints.headers: openresty
endpoints.key: X-WebKit-CSP
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Strict-Transport-Security
endpoints.headers: max-age=31536000; includeSubDomains
endpoints.key: Vend-Ingress
endpoints.headers: duke-d1c70bc13f2f
endpoints.key: Content-Security-Policy-Report-Only
endpoints.headers: frame-ancestors 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production
endpoints.key: Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: X-Frame-Options
endpoints.headers: SAMEORIGIN
endpoints.key: Content-Type
endpoints.headers: text/html
endpoints.key: Server-Timing
endpoints.headers: rid;desc="6762a563745af4e474f86f31"
endpoints.key: Connection
endpoints.headers: keep-alive
endpoints.key: Vend-RID
endpoints.headers: 6762a563745af4e474f86f31
endpoints.key: Cache-Control
endpoints.headers: no-cache
endpoints.key: Location
endpoints.headers: https://www.pandayan.vendhq.com/signin/
endpoints.key: Vend-Canary
endpoints.headers: __NOCANARY__
endpoints.key: Content-Length
endpoints.headers: 162
endpoints.key: Date
endpoints.headers: <REDACTED>
endpoints.html_tags: <title>301 Moved Permanently</title>
endpoints.body: <html>
  <head><title>301 Moved Permanently</title></head>
  <body>
  <center><h1>301 Moved Permanently</h1></center>
  <hr><center>nginx</center>
  </body>
  </html>
  
endpoints.html_title: 301 Moved Permanently
endpoints.supported_versions: HTTP/1.1 HTTP/2
endpoints.banner: HTTP/1.1 301 Moved Permanently
  Date:  <REDACTED>
  Content-Type: text/html
  Content-Length: 162
  Connection: keep-alive
  Server: openresty
  Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production
  Location: https://www.pandayan.vendhq.com/signin/
  Cache-Control: no-cache
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Vend-RID: 6762a563745af4e474f86f31
  Vend-Ingress: duke-d1c70bc13f2f
  Vend-Canary: __NOCANARY__
  Server-Timing: rid;desc="6762a563745af4e474f86f31"
  X-Frame-Options: SAMEORIGIN
  Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-WebKit-CSP: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  
endpoints.ip: 44.232.55.122
endpoints.path: /signin/
endpoints.endpoint_type: HTTP
endpoints.scan_time: 2025-10-12T14:07:59.934815
endpoints.uri: https://www.pandayan.vendhq.com/signin/
endpoints.protocol: HTTP/1.1
endpoints.status_reason: OK
endpoints.key: Last-Modified
endpoints.headers: Fri, 10 Oct 2025 10:03:28 GMT
endpoints.key: Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: X-Content-Security-Policy
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Date
endpoints.headers: <REDACTED>
endpoints.key: Cache-Control
endpoints.headers: no-cache
endpoints.key: Server
endpoints.headers: openresty
endpoints.key: Vend-RID
endpoints.headers: 0139c6ed7a17ccf14cf909cc
endpoints.key: Content-Security-Policy-Report-Only
endpoints.headers: frame-ancestors 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production
endpoints.key: X-Frame-Options
endpoints.headers: SAMEORIGIN
endpoints.key: Transfer-Encoding
endpoints.headers: chunked
endpoints.key: Strict-Transport-Security
endpoints.headers: max-age=31536000; includeSubDomains
endpoints.key: Vary
endpoints.headers: Accept-Encoding
endpoints.key: Connection
endpoints.headers: keep-alive
endpoints.key: X-WebKit-CSP
endpoints.headers: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
endpoints.key: Vend-Canary
endpoints.headers: __NOCANARY__
endpoints.key: Server-Timing
endpoints.headers: rid;desc="0139c6ed7a17ccf14cf909cc"
endpoints.key: Vend-Ingress
endpoints.headers: duke-d1c70bc13f2f
endpoints.key: Content-Encoding
endpoints.headers: gzip
endpoints.key: Content-Type
endpoints.headers: text/html
endpoints.html_tags: <title>Sign in to Lightspeed Retail POS Software | Lightspeed Retail</title> <meta name="referrer" content="origin"> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"> <meta name="theme-color" content="#0B0B0B">
endpoints.body: <!doctype html><html lang="en"><head><meta name="referrer" content="origin"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#0B0B0B"><title>Sign in to Lightspeed Retail POS Software | Lightspeed Retail</title><script type="text/javascript">!function(n,e,r,o,t,c,s,u){n.RaygunObject=t,n[t]=n[t]||function(){(n[t].o=n[t].o||[]).push(arguments)},c=e.createElement(r),s=e.getElementsByTagName(r)[0],c.async=1,c.src="//cdn.raygun.io/raygun4js/raygun.min.js",s.parentNode.insertBefore(c,s),u=n.onerror,n.onerror=function(e,r,o,c,s){u&&u(e,r,o,c,s),s||(s=new Error(e)),n[t].q=n[t].q||[],n[t].q.push({e:s})}}(window,document,"script",0,"rg4js")</script><script>!function(e,t,n,a,o){e=e[o]=e[o]||{q:[],onReady:function(t){e.q.push(t)}},(o=t.createElement(n)).async=1,o.src=a,(a=t.getElementsByTagName(n)[0]).parentNode.insertBefore(o,a)}(window,document,"script","https://www.datadoghq-browser-agent.com/datadog-rum-v4.js","DD_RUM")</script><link rel="stylesheet" href="//vendfrontendassets.freetls.fastly.net/fonts/fonts-v7.css"><script defer="defer" src="//vendappcdn.global.ssl.fastly.net/packages/ratifier/static/js/main.1e3eb9ac.js"></script><link href="//vendappcdn.global.ssl.fastly.net/packages/ratifier/static/css/main.6f443bbd.css" rel="stylesheet"></head><body><noscript><p>JavaScript is disabled. Please enable JavaScript to sign in to Lightspeed Retail.</p><p>To do this on an iPad or iPhone:</p><ul><li>Go to the Settings app on your home screen.</li><li>Select Safari.</li><li>Scroll to the bottom and choose Advanced.</li><li>Then turn JavaScript on.</li></ul><p>If you don’t see these settings please contact your administrator as they might need to enable it on their end.</p></noscript><div id="react-root"></div><script>{let e=localStorage,t="helios_refresh_theme",s="features";document.body.classList.toggle("vd-theme--refresh",+e.getItem(t)),fetch(`/api/2.0/${s}/edge?${s}=`+t).then((e=>e.ok&&e.json())).then((h=>h&&e.setItem(t,+h[s][t])))}</script></body></html>
endpoints.name: https://www.pandayan.vendhq.com/favicon.ico
endpoints.html_title: Sign in to Lightspeed Retail POS Software | Lightspeed Retail
endpoints.supported_versions: HTTP/1.1 HTTP/2
endpoints.banner: HTTP/1.1 200 OK
  Date:  <REDACTED>
  Content-Type: text/html
  Transfer-Encoding: chunked
  Connection: keep-alive
  Server: openresty
  Content-Security-Policy-Report-Only: frame-ancestors 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production
  Last-Modified: Fri, 10 Oct 2025 10:03:28 GMT
  Vary: Accept-Encoding
  Cache-Control: no-cache
  Content-Encoding: gzip
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  Vend-RID: 0139c6ed7a17ccf14cf909cc
  Vend-Ingress: duke-d1c70bc13f2f
  Vend-Canary: __NOCANARY__
  Server-Timing: rid;desc="0139c6ed7a17ccf14cf909cc"
  X-Frame-Options: SAMEORIGIN
  Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-Content-Security-Policy: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  X-WebKit-CSP: frame-ancestors 'self' *.vendhq.com *.retail.lightspeed.app; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production;
  
endpoints.ip: 44.232.55.122
[binary data, 15 values, 413 bytes]