{"report_id":"0c092a92-aa70-43c5-9473-5df053abf8a3","version":6,"status":"done","tags":[],"date":"2026-01-01T00:28:56Z","url":{"schema":"http","addr":"click.theincomesignal.com/?qs=7e2c5bf1812a72f0a28e8e63d50d724b26d083b888645e887c44bfa21fa4cac84c3ee076ad02a4578d57a2b998df7cefc72b1986fb5faa4b","fqdn":"click.theincomesignal.com","domain":"theincomesignal.com","tld":"com"},"ip":{"addr":"128.245.96.21","port":0,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","fqdn":"www.clkmg.com","domain":"clkmg.com","tld":"com"},"title":"Error - Access Denied","dom":{"size":1274,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a71a928f214abbf40b4928304c78b9d5","sha1":"e69dc55f3d00b7dd1c133fd8f9d6455a162b5ff1","sha256":"99d65147242411c7429c6bbeab1acbc456add3145a9969aee82e7213fd6126aa","sha512":"4f73c25c959fc4945926ac5c461ef3cf6009cad3cf0efb7ef491825ab82bb0a2d97086d61ff6ca3cb5d5889dcb80ab0cd28fa7650ec900fb9090b2355fedee49","ssdeep":"","tlshash":"4a21dd8636e4620a6522105bec913fd08fc9506f87457ec47c1ec07e2f959958c7767e","dom_hash":"domhashb63f71b7d4d61be5fb582a3dd581a409","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"click.theincomesignal.com/?qs=7e2c5bf1812a72f0a28e8e63d50d724b26d083b888645e887c44bfa21fa4cac84c3ee076ad02a4578d57a2b998df7cefc72b1986fb5faa4b","fqdn":"click.theincomesignal.com","domain":"theincomesignal.com","tld":"com"},"ip":{"addr":"128.245.96.21","port":0,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-05T00:28:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"pp.track.theincomesignal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"pp.track.theincomesignal.com","ip":{"addr":"85.17.65.238","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2159,"sent_data":590,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.clkmg.com","ip":{"addr":"44.228.84.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":895089,"first_seen":"2016-03-24T06:51:15Z","last_seen":"2025-12-29T13:08:10.159878Z","alert_count":0,"request_count":3,"received_data":4727,"sent_data":1552,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.clkmg.com","ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":0,"first_seen":"2015-01-01T08:43:46Z","last_seen":"2025-12-29T13:07:59.238715Z","alert_count":0,"request_count":2,"received_data":6715,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"click.theincomesignal.com","ip":{"addr":"128.245.96.21","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"domain_registered":"2025-08-05","domain_rank":0,"first_seen":"2026-01-01T00:21:05.350749Z","last_seen":"2026-01-01T00:21:05.350749Z","alert_count":0,"request_count":1,"received_data":1550,"sent_data":610,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.clickmagick.com","ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":0,"first_seen":"2015-01-07T13:37:38Z","last_seen":"2025-12-29T13:08:44.70342Z","alert_count":0,"request_count":2,"received_data":309396,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pp.track.theincomesignal.com/692da7d81d43d8a76cb215ea?email=rzupan@deltadentalwi.com\u0026domain=388TIS\u0026type=B\u0026product=PYSTR626","fqdn":"pp.track.theincomesignal.com","domain":"theincomesignal.com","tld":"com"},"ip":{"addr":"85.17.65.238","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T00:28:34.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pp.track.theincomesignal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 06:01:40 GMT","end":"Thu, 19 Feb 2026 06:01:39 GMT"},"fingerprint":{"sha1":"FD:54:C1:90:8C:4F:DA:F5:2B:99:DE:A8:A2:5F:DE:45:F0:11:35:AC","sha256":"56:9A:07:EE:B7:7F:78:EB:A5:36:4F:D9:CC:2D:12:B8:C8:64:8A:78:EB:DC:5A:11:E6:3F:86:82:2F:0A:37:05"}}},"request":{"raw":"GET /692da7d81d43d8a76cb215ea?email=rzupan@deltadentalwi.com\u0026domain=388TIS\u0026type=B\u0026product=PYSTR626 HTTP/1.1\r\nHost: pp.track.theincomesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 104\r\nConnection: keep-alive\r\nLocation: https://www.clkmg.com/alexvitt/PYSTR/rzupan%40deltadentalwi.com/388TIS/B/PYSTR626\r\nSet-Cookie: redcmps=W3siaWQiOiI2OTJkYTdkODFkNDNkOGE3NmNiMjE1ZWEiLCJ0IjoiMjAyNi0wMS0wMVQwMDoyODozNC45NDA3MTY4NjVaIn1d; Path=/; Domain=pp.track.theincomesignal.com; Expires=Fri, 02 Jan 2026 00:28:34 GMT; Secure; SameSite=None\nredhash=Njk1NWJmYjIxOGU4MGQ5ODNjZDg5OThmfDB8NjkyZGE3ZDgxZDQzZDhhNzZjYjIxNWVhfHw0OTUwNTIxZi1hZTgzLTQ5ZDMtYTRlMy1kOTE4ZmIzODFmNTZ8MTc2NzIyNzMxNA==; Path=/; Domain=pp.track.theincomesignal.com; Expires=Fri, 01 Jan 2027 00:28:34 GMT; Secure; SameSite=None\r\nDate: Thu, 01 Jan 2026 00:28:34 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nX-Kong-Upstream-Latency: 20\r\nX-Kong-Proxy-Latency: 3\r\nX-Kong-Request-Id: 23ba623839117659bd0e990b298c7e5e\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1245,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":127,"dns":54,"connect":22,"send":0,"wait":46,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"pp.track.theincomesignal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","fqdn":"www.clkmg.com","domain":"clkmg.com","tld":"com"},"ip":{"addr":"44.228.84.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T00:28:36.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clkmg.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:35:55 GMT","end":"Sun, 05 Apr 2026 20:35:54 GMT"},"fingerprint":{"sha1":"CA:D2:A1:68:22:0B:0C:2C:F9:69:BC:1C:76:76:F6:CF:DF:19:EF:78","sha256":"EF:96:44:C5:97:8F:35:38:52:44:A0:67:88:05:5A:AF:99:F9:EB:18:35:B8:57:E1:76:EF:96:BF:D2:C9:D5:29"}}},"request":{"raw":"GET /err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403 HTTP/1.1\r\nHost: www.clkmg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: alc=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: undefined-origin\r\nAccess-Control-Max-Age: 300\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Thu, 01 Jan 2026 00:28:36 GMT\r\nP3P: CP=\"This is not a P3P policy! See http://www.clkmg.com for more info.\"\r\nServer: nginx\r\nX-CM-FE: httpfe-0\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 1; mode=block\r\nContent-Length: 1245\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6cb2e6a03908737b1cd2de5119250cb8","sha1":"e62db0e514be3de39b977088b3422c4f230a3963","sha256":"a9d16b4ae0aa78c65b8b867fbcdb5888375d374e43d0341a8a6ffe831c6eb1ce","sha512":"3c7dcd72633147852dc1e0abd5eade29eb30dee91920ebded7dc375cc01e2829115e59b437efc77cd36eadb06e5c8d75c8e92caeb4162c6fe59253f8c8ae9830","ssdeep":"","tlshash":"c021aa8a67e476061002102bfc813fd19eca506b93857ee57c1ec17e2fd9a514c2b65e","first_seen":"2025-01-04T23:00:55.349655Z","last_seen":"2026-04-09T21:33:30.030331Z","times_seen":26340,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clkmg.com/misc/css/style.css","fqdn":"cdn.clkmg.com","domain":"clkmg.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","date":"2026-01-01T00:28:36.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clkmg.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:35:55 GMT","end":"Sun, 05 Apr 2026 20:35:54 GMT"},"fingerprint":{"sha1":"CA:D2:A1:68:22:0B:0C:2C:F9:69:BC:1C:76:76:F6:CF:DF:19:EF:78","sha256":"EF:96:44:C5:97:8F:35:38:52:44:A0:67:88:05:5A:AF:99:F9:EB:18:35:B8:57:E1:76:EF:96:BF:D2:C9:D5:29"}}},"request":{"raw":"GET /misc/css/style.css HTTP/1.1\r\nHost: cdn.clkmg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.clkmg.com/\r\nCookie: alc=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: undefined-origin\r\nAccess-Control-Max-Age: 300\r\nDate: Wed, 31 Dec 2025 07:20:37 GMT\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 25 Aug 2025 16:57:04 GMT\r\nP3P: CP=\"This is not a P3P policy! See http://www.clkmg.com for more info.\"\r\nServer: nginx\r\nX-CM-FE: httpfe-1\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 1; mode=block\r\nETag: W/\"1192-63d3371ef01e3\"\r\nVary: accept-encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: Cbfkb1u3DRDF8aQMaMWtCt18maM0EYoZ_0hfBnHbcb5-ETWaC--DMQ==\r\nAge: 61679\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4498,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e540f61448a0e598774be6738463a0c5","sha1":"75c83228491705c9a412383803decd6878c3f163","sha256":"263bd19121ab72d1db5109850141dd62598ee8d4240b4cbfb3bce40a85c5da3c","sha512":"cc57bc28d4915ab22d81abc2ececa9349ab58b3a4ce25dae957889b0569f78c3ca52d17a6d58c291989afe743b90e8fce0df9080fb14b71699b8d5ff15539209","ssdeep":"96:MAOApKOAp4SBEjAOAjOAjSBXeYksqyEeHRw0EnHtnvEs:MAvYvC7Avjvj3b1Fv7","tlshash":"60914f526e156302b72708547653ffc03b1c60928ca7db38ba9d78688ecf1e06694f4f","first_seen":"2023-04-05T22:53:20Z","last_seen":"2026-04-10T03:19:14.429175Z","times_seen":35786,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":172,"dns":162,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clkmg.com/images/spacer.gif","fqdn":"cdn.clkmg.com","domain":"clkmg.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","date":"2026-01-01T00:28:36.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clkmg.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:35:55 GMT","end":"Sun, 05 Apr 2026 20:35:54 GMT"},"fingerprint":{"sha1":"CA:D2:A1:68:22:0B:0C:2C:F9:69:BC:1C:76:76:F6:CF:DF:19:EF:78","sha256":"EF:96:44:C5:97:8F:35:38:52:44:A0:67:88:05:5A:AF:99:F9:EB:18:35:B8:57:E1:76:EF:96:BF:D2:C9:D5:29"}}},"request":{"raw":"GET /images/spacer.gif HTTP/1.1\r\nHost: cdn.clkmg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.clkmg.com/\r\nCookie: alc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: undefined-origin\r\nAccess-Control-Max-Age: 300\r\nDate: Wed, 31 Dec 2025 03:55:35 GMT\r\nETag: \"2b-63cac3c731670\"\r\nLast-Modified: Mon, 18 Aug 2025 23:38:26 GMT\r\nP3P: CP=\"This is not a P3P policy! See http://www.clkmg.com for more info.\"\r\nServer: nginx\r\nX-CM-FE: httpfe-0\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 1; mode=block\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: AqhRo2WCtp5BpqouaBMFsMjwwXC2b0DmN3TQS6SywClKCyBkIGpfnA==\r\nAge: 73981\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-04-20T13:05:14.61859Z","times_seen":67066,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clkmg.com/favicon.ico","fqdn":"www.clkmg.com","domain":"clkmg.com","tld":"com"},"ip":{"addr":"44.228.84.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","date":"2026-01-01T00:28:36.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clkmg.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:35:55 GMT","end":"Sun, 05 Apr 2026 20:35:54 GMT"},"fingerprint":{"sha1":"CA:D2:A1:68:22:0B:0C:2C:F9:69:BC:1C:76:76:F6:CF:DF:19:EF:78","sha256":"EF:96:44:C5:97:8F:35:38:52:44:A0:67:88:05:5A:AF:99:F9:EB:18:35:B8:57:E1:76:EF:96:BF:D2:C9:D5:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.clkmg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403\r\nCookie: alc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: undefined-origin\r\nAccess-Control-Max-Age: 300\r\nCache-Control: max-age=2592000, public, no-transform\r\nContent-Type: image/x-icon\r\nDate: Thu, 01 Jan 2026 00:28:36 GMT\r\nETag: \"6387ce19-4e\"\r\nExpires: Sat, 31 Jan 2026 00:28:36 GMT\r\nLast-Modified: Wed, 30 Nov 2022 21:41:45 GMT\r\nPragma: public\r\nServer: nginx\r\nX-Permitted-Cross-Domain-Policies: none\r\nContent-Length: 78\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 1x1, 2 colors","md5":"c9e1efa761b83f4a25a07dc85c207f95","sha1":"7c1df040d4119e1c1b4f875c362f363ad1f6ba13","sha256":"91634633ca6d34044c356a9a0baa832f1927d8326e1ae1a95af22b864d30dd7f","sha512":"d21a98b4a9362b4662163f28ab27f799cf2abb04ae690431c15c806772837be545cfacada56db5045cfa22ef4935d14ae0ac791974a095003156b0bf430e2857","ssdeep":"","tlshash":"fca000833380000ac0000e3080b30f08ab38c80a8b0b238202280308ccab2ca0e082c0","first_seen":"2023-05-02T18:08:45Z","last_seen":"2026-04-10T03:19:14.427625Z","times_seen":36932,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.theincomesignal.com/?qs=7e2c5bf1812a72f0a28e8e63d50d724b26d083b888645e887c44bfa21fa4cac84c3ee076ad02a4578d57a2b998df7cefc72b1986fb5faa4b","fqdn":"click.theincomesignal.com","domain":"theincomesignal.com","tld":"com"},"ip":{"addr":"128.245.96.21","port":443,"asn":14340,"as":"SALESFORCE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T00:28:34.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"click.theincomesignal.com","organization":"Salesforce, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:26:B2:6C:22:E2:98:0D:48:9F:E8:A9:08:24:0D:10:29:5E:B5:66","sha256":"AA:AB:DF:76:7C:2D:81:C1:AA:27:2C:C9:8E:C9:AE:95:62:A7:3E:06:0C:C4:A2:C1:67:13:8E:E2:DB:E2:E1:AB"}}},"request":{"raw":"GET /?qs=7e2c5bf1812a72f0a28e8e63d50d724b26d083b888645e887c44bfa21fa4cac84c3ee076ad02a4578d57a2b998df7cefc72b1986fb5faa4b HTTP/1.1\r\nHost: click.theincomesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: https://pp.track.theincomesignal.com/692da7d81d43d8a76cb215ea?email=rzupan@deltadentalwi.com\u0026domain=388TIS\u0026type=B\u0026product=PYSTR626\r\nDate: Thu, 01 Jan 2026 00:28:33 GMT\r\nConnection: close\r\nContent-Length: 259\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1245,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":368,"dns":20,"connect":112,"send":0,"wait":215,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clkmg.com/alexvitt/PYSTR/rzupan%40deltadentalwi.com/388TIS/B/PYSTR626","fqdn":"www.clkmg.com","domain":"clkmg.com","tld":"com"},"ip":{"addr":"44.228.84.60","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T00:28:34.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clkmg.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:35:55 GMT","end":"Sun, 05 Apr 2026 20:35:54 GMT"},"fingerprint":{"sha1":"CA:D2:A1:68:22:0B:0C:2C:F9:69:BC:1C:76:76:F6:CF:DF:19:EF:78","sha256":"EF:96:44:C5:97:8F:35:38:52:44:A0:67:88:05:5A:AF:99:F9:EB:18:35:B8:57:E1:76:EF:96:BF:D2:C9:D5:29"}}},"request":{"raw":"GET /alexvitt/PYSTR/rzupan%40deltadentalwi.com/388TIS/B/PYSTR626 HTTP/1.1\r\nHost: www.clkmg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: undefined-origin\r\nAccess-Control-Max-Age: 300\r\nContent-Type: text/html; charset=iso-8859-1\r\nDate: Thu, 01 Jan 2026 00:28:36 GMT\r\nLocation: https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403\r\nP3P: CP=\"This is not a P3P policy! See https://www.clkmg.com for more info.\"\r\nServer: nginx\r\nSet-Cookie: alc=1; domain=.clkmg.com; expires=Thu Jan  1 00:28:40 2026; path=/;\r\nX-CM-FE: httpfe-2\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 1; mode=block\r\nContent-Length: 251\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":2061,"timings":{"blocked":933,"dns":47,"connect":169,"send":0,"wait":195,"receive":0,"ssl":714},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clickmagick.com/misc/fonts/website/v3/Inter-Regular.woff","fqdn":"cdn.clickmagick.com","domain":"clickmagick.com","tld":"com"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","date":"2026-01-01T00:28:36.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickmagick.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:08:58 GMT","end":"Sun, 05 Apr 2026 20:08:57 GMT"},"fingerprint":{"sha1":"D2:C3:F5:07:45:37:16:E6:04:05:DB:7A:B0:91:A5:0E:12:AC:01:4A","sha256":"B2:1F:07:9F:F8:38:B7:A8:BA:6D:FC:6D:F9:1C:72:1B:E0:0F:B4:0A:07:4E:28:93:0E:D2:05:28:D6:50:03:36"}}},"request":{"raw":"GET /misc/fonts/website/v3/Inter-Regular.woff HTTP/1.1\r\nHost: cdn.clickmagick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://cdn.clkmg.com/\r\nOrigin: https://www.clkmg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 149344\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://www.clkmg.com\r\naccess-control-max-age: 300\r\ndate: Wed, 31 Dec 2025 22:08:00 GMT\r\netag: \"687a8751-24760\"\r\nlast-modified: Fri, 18 Jul 2025 17:41:37 GMT\r\nserver: nginx\r\nx-cm-fe: httpfe-2\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vCSh0OyO7odQq2x7BLVbNZzdJop2FFuCg7mBoeFpew4_obrlebyoIA==\r\nage: 8436\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=31536000, public, no-transform\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149344,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 149344, version 0.0","md5":"ea2c76b525641c2051cdf7d930e465ba","sha1":"b3ffc2515b8429e92540e084fd6011f32b8df368","sha256":"6ab2042219a7bbc2f5523d61ad24c9f1e3627f2cbb891669d981da8bb019c11e","sha512":"e4ba3adebe831b10313fd015ef063c25c93071cadb0bafe774da989ba1549ed43db3499248482bd2765d8265729ce184263ded09b5e8124294c4fdb062d01d6f","ssdeep":"3072:muHcGCkfy99fTwFRSizpe57phVtA/RhgJdNGbasipMWXAvnDWQ8SaeJ1:m2lGf0vSjdVtA/LuQipMSRSR1","tlshash":"d5e3125847af8f439e01183163bbe6b506db059484ea365b0c822a7df576c43349bbbd","first_seen":"2023-04-05T22:53:20Z","last_seen":"2026-04-10T03:19:14.42968Z","times_seen":35813,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":88,"dns":59,"connect":1,"send":0,"wait":3,"receive":6,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clickmagick.com/misc/fonts/website/v3/Inter-Medium.woff","fqdn":"cdn.clickmagick.com","domain":"clickmagick.com","tld":"com"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.clkmg.com/err/?u=alexvitt\u0026l=PYSTR\u0026s=A\u0026e=403","date":"2026-01-01T00:28:36.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clickmagick.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 04 Mar 2025 20:08:58 GMT","end":"Sun, 05 Apr 2026 20:08:57 GMT"},"fingerprint":{"sha1":"D2:C3:F5:07:45:37:16:E6:04:05:DB:7A:B0:91:A5:0E:12:AC:01:4A","sha256":"B2:1F:07:9F:F8:38:B7:A8:BA:6D:FC:6D:F9:1C:72:1B:E0:0F:B4:0A:07:4E:28:93:0E:D2:05:28:D6:50:03:36"}}},"request":{"raw":"GET /misc/fonts/website/v3/Inter-Medium.woff HTTP/1.1\r\nHost: cdn.clickmagick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://cdn.clkmg.com/\r\nOrigin: https://www.clkmg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 157888\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: https://www.clkmg.com\r\naccess-control-max-age: 300\r\ndate: Wed, 31 Dec 2025 22:08:00 GMT\r\netag: \"687eaea5-268c0\"\r\nlast-modified: Mon, 21 Jul 2025 21:18:29 GMT\r\nserver: nginx\r\nx-cm-fe: httpfe-0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CiEfoqKx5Pr6YJ3j7eegV7UrsfOeVJWuGzoqjnflzeou-3V564ODDA==\r\nage: 8436\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=31536000, public, no-transform\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157888,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 157888, version 0.0","md5":"6b5a42f0603ea013e7099c2160e007e7","sha1":"1a817b28d15fba7537a6ac0ed28126589062f303","sha256":"860f80f683dd2cca3acc4680a798cd8a1a8dd8d6a0e18312692d9504f3792242","sha512":"d35397204ddbc104d154ac8d7e13c591e4a1080e46f85683338adffec24f08070eb0f73f7f85e037484349dbe4c27adf4726b147a4dccd5efd1223dabb8de786","ssdeep":"3072:+ggFwQps7NRzLGGFRRuIie/FatPz+jpXZ5B+xKvH/ldNGbasiTLwNkAYGJJJ84:+pps77H7RRu6S7YZH+xCHrQiwNkAz","tlshash":"2ef3125d566f8f2babc64939c7833ced159e0010063367162c8db4e6bd79f4238adb64","first_seen":"2023-04-05T22:53:20Z","last_seen":"2026-04-10T03:19:14.430252Z","times_seen":35798,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":125,"dns":54,"connect":0,"send":0,"wait":3,"receive":5,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}