{"report_id":"14b193d0-16d7-49ed-ad3e-118690247379","version":6,"status":"done","tags":[],"date":"2025-12-22T16:49:01Z","url":{"schema":"http","addr":"directpersonalfinance.acemlnd.com","fqdn":"directpersonalfinance.acemlnd.com","domain":"acemlnd.com","tld":"com"},"ip":{"addr":"54.235.205.181","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"title":"DIRECTPERSONALFINANCE Email Marketing","dom":{"size":1487,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1487), with no line terminators","md5":"7b1fd823d072ac3677a1649a58163a8b","sha1":"b7c444fde299f22be4cd47301b54f17dbe86ea30","sha256":"d15eba430105ff343a150beb0367c4f90f6774d88998a0e7b73cef27a95f17a6","sha512":"dcdc1e5ad8436544a57fc29e6db54e04fc9f38ad63191854f2a1a1c26125c370e7c146659c0f34d62b21f123bf21b71652228dcf3ab222a925688a5a9d9076f0","ssdeep":"","tlshash":"073154e880b0151acb6fc2b1e2ac33ab5477b21b83c4540de2f94894bbb6c687c1c795","dom_hash":"domhashdaf18e69ebd7b252f1b2ac1f4bf96368","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"directpersonalfinance.acemlnd.com","fqdn":"directpersonalfinance.acemlnd.com","domain":"acemlnd.com","tld":"com"},"ip":{"addr":"54.235.205.181","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T16:49:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"directpersonalfinance.acemlnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d226aj4ao1t61q.cloudfront.net","ip":{"addr":"54.192.209.101","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-02-28T06:37:08Z","last_seen":"2025-12-19T11:08:45.878019Z","alert_count":0,"request_count":1,"received_data":1673,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2025-12-22T03:51:54.998152Z","alert_count":0,"request_count":7,"received_data":938624,"sent_data":3014,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":895,"first_seen":"2020-10-23T05:27:50Z","last_seen":"2025-12-22T13:33:20.997328Z","alert_count":0,"request_count":2,"received_data":852,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":2,"received_data":92526,"sent_data":1190,"comment":"","tags":null,"fingerprints":null},{"fqdn":"solve-api.forethought.ai","ip":{"addr":"104.17.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":106040,"first_seen":"2023-07-07T11:48:09Z","last_seen":"2025-12-16T22:56:05.047824Z","alert_count":0,"request_count":2,"received_data":15954,"sent_data":1364,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":344528,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"platform-cdn.app-us1.com","ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-11-13","domain_rank":989417,"first_seen":"2022-12-02T22:57:38Z","last_seen":"2025-12-18T20:48:28.151834Z","alert_count":0,"request_count":4,"received_data":1425387,"sent_data":1788,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":2,"received_data":137561,"sent_data":1455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3tnn7lar6ozas.cloudfront.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2021-01-20T19:31:18Z","last_seen":"2025-12-17T15:08:38.776828Z","alert_count":0,"request_count":2,"received_data":2309,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2025-12-22T06:53:01.04379Z","alert_count":0,"request_count":1,"received_data":2914,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"data.pendo.io","ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-06-17","domain_rank":4080,"first_seen":"2019-01-16T07:26:26Z","last_seen":"2025-12-16T09:27:21.113937Z","alert_count":0,"request_count":7,"received_data":4835,"sent_data":5079,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"directpersonalfinance.activehosted.com","ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-09-01","domain_rank":4372465,"first_seen":"2025-02-10T19:55:42.763765Z","last_seen":"2025-11-07T20:33:59.511918Z","alert_count":0,"request_count":23,"received_data":3703238,"sent_data":17769,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.13.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"ActiveCampaign","description":"ActiveCampaign is email and marketing automation software.","website":"https://www.activecampaign.com","common_platform_enumeration":"","icon":"ActiveCampaign.svg","categories":["Marketing automation","Email"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"solve-widget.forethought.ai","ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":153278,"first_seen":"2020-06-23T18:05:23Z","last_seen":"2025-12-16T22:56:05.06078Z","alert_count":0,"request_count":6,"received_data":3063197,"sent_data":2850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-21T22:19:25.211281Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"o185886.ingest.sentry.io","ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":155488,"first_seen":"2021-05-03T12:54:03Z","last_seen":"2025-12-17T15:08:38.913282Z","alert_count":0,"request_count":1,"received_data":522,"sent_data":658,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"directpersonalfinance.acemlnd.com","ip":{"addr":"54.235.205.181","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2015-09-17","domain_rank":4514151,"first_seen":"2024-07-22T14:00:37Z","last_seen":"2025-11-07T20:33:59.53038Z","alert_count":1,"request_count":1,"received_data":8383,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.pendo.io","ip":{"addr":"34.36.213.229","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-06-17","domain_rank":4461,"first_seen":"2017-01-30T10:19:45Z","last_seen":"2025-12-17T07:17:16.29882Z","alert_count":0,"request_count":2,"received_data":1661769,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3rxaij56vjege.cloudfront.net","ip":{"addr":"54.230.241.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2014-05-07T11:15:48Z","last_seen":"2025-12-17T13:25:39.374312Z","alert_count":0,"request_count":2,"received_data":15900,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2c8c80a4d473e45905e59318545d08f","sha1":"06ec786ac34f107ffdd52b5b2091f6bd4bbbf695","sha256":"9521170bba73e8510e258dc77ad76297429cec8645411b0db51e7fa6a546db07","sha512":"a7d7d815f545d4fc198e7b7d8894fea2601d5da961eba7bc84d57f621c9c6594f152c99314dd42c52efee4ab27ae838b0ee2eccaa67d3bca7583380c0268188c","ssdeep":"1536:R6S+p++PDBkSPT/Qy2g0BycStb/zC5YkEtASBn/T5eYj/MTzU8uoHoqJd4R3YjFq:4PlPH2TKbbCZEaIIbwYFeUaZZRBpR+gf","tlshash":"ee042bd8b2a1f5b207d361b9653f110bf3353468a40881a4f62dd8e63bb898b4177f79","size":186349,"data":"","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-03-27T21:21:53.026247Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/EHawkTalon6.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a965fa1bff0d7d24bc10c99ab4c6107","sha1":"f35647572142ac3a3167a7f09089e9a63cf38138","sha256":"54c0d489f8d98b5eccf7c48ae0db4f9aee4be50a9c57de9bbdd912683a5fa99b","sha512":"8bc69abac38ffbbc29ef80c929fa0110f1722b34c808a6b90b93dee357fedae0de0650d258deac75223ddf5c78650ccae1e01c3447ea949d479a13e683f262a8","ssdeep":"1536:CIQqXQoLZjBB3ovdzxo3MaidyI7N8JVdCgFZcrX/CLhfUSE5am:bQMjnydz2BJHdCCD2B","tlshash":"21a3c5c9f2c7b0a613e364a5006f610ae27a6d58b40e99c2d266e5d0fc7894f5037fbc","size":98648,"data":"","first_seen":"2023-10-29T20:47:24Z","last_seen":"2026-04-12T03:38:55.112764Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/js/index.909870bb.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51493852c5e8ed8072b2e449298cf805","sha1":"e52cb50229c19deeca6cd08977eea83e6448e51c","sha256":"61d79018d8abb86a3884238226aaa19e96ca830b3f255d5e7b3b437be86ddd11","sha512":"d9b208399e04c2d4a085741bd28be28b58efed7041564bae33d76878591b63c9258a500ebde027f66a21d1cc5a92502c19d4ca562d377ce22dc84bc582bff97e","ssdeep":"1536:b7XGXdhARfdELsPaDlikHmIMkj+bUWo6pEHTXnRgf4jKCOYFdA6ANl9WNN5sAqWE:2dORf52li/IMaHTXhGCOYTA6mlfAqWCH","tlshash":"44f39689f6c170ea42e375e1011f610fa1b72a55f84f8980e266d4e4ecbd64f9027f6e","size":167004,"data":"","first_seen":"2025-12-20T15:43:46.238177Z","last_seen":"2025-12-22T16:49:15.591024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/js/async/438.4f9f49cc.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba037cbe1e0a1041ce6463bbe893539d","sha1":"194d1d0b40333a88bff2df0c378f4f48794ae5be","sha256":"49a1ffde95bcd5e3df91c717def1955351776d1cfdc19405fe56d85bd701be97","sha512":"c685f0f327e4247f2f64aa75968fb54f831f06ebc0bdf28ea8abdc9d0f217e55d3d44347ba3c7fc78a798425bb42d8de965ea8ea9f881e6e7fbea6d381741380","ssdeep":"49152:mnSPH1FVEjneMzong76JbZLTKS/ccDpHFjOehQ0hRJ:mIFVElbGJbZ+cl40hD","tlshash":"07c57dd97382b06187db55e680bf4206f33d1d65280d8828f275dcdb2a6898cb1b7f79","size":2625350,"data":"","first_seen":"2025-12-20T15:43:46.345167Z","last_seen":"2025-12-22T16:49:15.622236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/jq/csrf_protection.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a500cf29d32cdfd51b64fb954a27b326","sha1":"e44ed2fa6b2e5e1a361b10dc47395149b4f94917","sha256":"683fee361e0d102813dc94deb9f32ad142c1c1c85a2dd0b78e8eca13b6dc7938","sha512":"b9f3b9cce370cf4d9504bf824140e4876f34bc957cf18fc325d071cb3357a08240061a087317ee438e08a43f64d1c636e64574a372e78af8231db2514eb8b42d","ssdeep":"96:slSEbGRexaH+H4HXMHWzXSJDQnAGW1YX2cjqwdZEWmRqwHqwLTcboa4uvp8Sl+BP:HiGXFcWzX/nAn1oVjPdZEW8PHPLgp8SU","tlshash":"b49196d6b29e752f45b124606da793b577b8f33034128445d498c1fd66c252ed327f42","size":4503,"data":"","first_seen":"2025-04-14T12:18:42.116628Z","last_seen":"2026-04-12T03:34:16.806063Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/jsc/ac.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"285f8d148043d68882cc2e4891b9df46","sha1":"8ed7b70ff12b9dc0afb1692f52e8578a1fd88704","sha256":"fd1fc9c8f2532361951446c544831b536a864b204b48b61b3b2f225d387bfa91","sha512":"d176a53084e651423a53fc870c1b86b782e4a9ae45e6b6dd1c45a6b45054cde83546a730021b250ac86ae48152f2114cb616d032bb349f59297934a85896036d","ssdeep":"1536:KYDugRTFbV6+zEVnJFkF3HHiWK3ScuAObxbw:KIJRTzxHAULk","tlshash":"21432accb3663067d6a356a8047f0606b03699abfd081de9d14999f43db1e8db073f68","size":56565,"data":"","first_seen":"2025-12-22T16:38:57.50501Z","last_seen":"2025-12-22T18:24:21.69369Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-12T13:59:34.535847Z","times_seen":139347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/ac_global/jsc/auth.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"381be67ac0dc078d83e783bb29d3dfa2","sha1":"9a279f03ad366bf114061ac62bef5343d2801cea","sha256":"497393c78db621dba4453991eebf1a46db62625146c61af03879716cf0f628eb","sha512":"2bf32aaf40fa411e0b360b32733fd0f5c7948902a405f2f2cded9941b34bd597ff20f09bf7fca32f078d5087a9c864bb6f9eb1a890cfdf2d8019025d25acae06","ssdeep":"1536:0SBhsMU3+AXRc77VOXhO1t5s7+wd7gNSh0Hc+vzvODECUJcQf2c3fc3vOFP3Yy:C3YEXhO1t5s7+wd7gNShKDbW6JcQ+c3j","tlshash":"7233d98e734334c742b6057e119f9387aa34a7d1b7a418f1d1d5c89068a897903ebfbe","size":54950,"data":"","first_seen":"2025-03-24T12:19:41.822214Z","last_seen":"2026-03-24T17:09:47.427759Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/jq/notification.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9244a53cf44e50b3fb6c0e2bc2aec38","sha1":"e4aea45cbe5b546a1dcdb57f7ca9286808f8ce0c","sha256":"7676abec852facaaa77246da43ef04bb4d52386f23f40ead92d3cff35f482d3c","sha512":"5ba51b344b2514c601275e8937d1220e944e77fa87bae24cd5ea7a66537f4eaa124f6aa313ae5ef95ccba33157a105b0169a825674887d3d6cc453f9e8a94299","ssdeep":"","tlshash":"9921234da2de51ac99f230be593e66ec573f51244625fcb67df341f40880c486362a6a","size":1406,"data":"","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-04-12T03:34:16.800845Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/embed.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aae64bf7c87cbdeeb254170cd0caae6","sha1":"f7ebb4595435dfc30e0b24b56e5d442a9ec3bbde","sha256":"772b2892719f60ad727c62ce4d84f01327c01d7a9bc4a03134c19d46375c3870","sha512":"71150d3f34c5b39a3917e2fbb01847616adfc962c54858e0a388a201f8df05064683352ac4fdd66f2c8f5086f89e50d167a08ecf65068e8ccb1f73f7bbb5582c","ssdeep":"1536:zt/dDQhOcOXZ/gE/GRcM54bskHS2mq3NSzSDaEIHSiHslQivDV5oElz5b7AX63eK:fcgXQMsWS2NDqHS+za8w3e8nV","tlshash":"dd14f989f692f0b507f75194812f6207f23b2a28740e58e1faa5c5d5a87898f9073f7c","size":202981,"data":"","first_seen":"2025-12-20T15:43:46.327389Z","last_seen":"2025-12-22T16:49:15.596936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js","fqdn":"cdn.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.36.213.229","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f1afc51a109d25d5634f1c17dd363c","sha1":"3bf4eb68e9fc878542194bbc18fac49113ac545a","sha256":"d8e219fb1eb2e643043afcd174e02f9f7e8aab74ff44ee4753e1232e3dfb832c","sha512":"32e2588b9f3e551ac0c9461b7a1d61f9548cd715f52f1aab46fb24e8926aabb2bc83d336d05801ce84c1bc4638f6d7156c998dafaf61182ceffaf6d607f3ddbe","ssdeep":"24576:/Zj5GXeB+qScO/cYMjfhJ6yI8ZxEtvVnXoiHI:/Zj5NB+qScO/MhdI8ZxEtvVnXFI","tlshash":"f20539de31c6b03653a720ba806f100ab23b5d58681d4498f529d8ea3c7d98e5377fbd","size":830186,"data":"","first_seen":"2025-12-22T16:49:15.621088Z","last_seen":"2025-12-22T16:49:15.621088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a086abe9b48c00561ed655fe18419275","sha1":"4f43b889e740bb2371d2aff4a32cffe68138efca","sha256":"98546ac7de4a49108c29c479218832dc89677e8848390568f460df358b5ea120","sha512":"b7bc61c2eb6c03fd47e814c493817e707817687d7cab7b0d4fd78ffc71316a5f0e4a87e526a8c38c75c6aefbe4dc736918246326a4d488c9d94426410b08caa6","ssdeep":"12288:UUrHdlPYvaBH3FezFaaWHClkTMO1zNxEuiMfJOoRbIy:UUhlPYSPezFaahlkTMO1zNxEwYoRbIy","tlshash":"54f44ac974d2b06647e721a2407f100bf33a2e19780d8450f265ecdabeb994da277f6d","size":754333,"data":"","first_seen":"2025-12-11T15:44:01.012641Z","last_seen":"2026-01-08T10:46:33.834851Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.13.3/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3305041b1dffc2ada01dd1f54417f300","sha1":"aa006fccf39c5fe50d87f0596f6c5c437588dae2","sha256":"b30d2234d5e63896d085816e0bd385da43a50f929029ed72e657c19f80bd4a38","sha512":"5b0d72f4eb90da47a18155920ffde78607eb6f8db83b7f34d9060ffc0e603d7a0ce3ead18e22ab8c7746c502ab306432926b09ffcea819d1eccdf715814af884","ssdeep":"3072:+luPSaSvN5kaiDLCutlfU89lKazR42uz1eWaGMFW5dwgsY64OA1n:92YlPOgEMAFXTOk","tlshash":"0944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":254963,"data":"","first_seen":"2024-06-16T16:54:07Z","last_seen":"2026-04-12T13:48:34.295835Z","times_seen":1739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/mainjs.php?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"567ce125a09136c78bb2465f0917517b","sha1":"504c46af54e6de7ce3695da0ce34b7aefecfcd75","sha256":"342515cd51f04e5c6d2795ca6aac1aa272bba94f3df358bfd5c5e4971b46c143","sha512":"e4386e60b3d849fc0e3581ef717015b766f1f265298552f0a66060537f71df8bed19436ac3408cc06a91126b271c54b7b60a1a2b0d8afd2dba36d820a5abd5a8","ssdeep":"192:bBlUuDWQN3NdRqUD7RaHHILWD/qFifAWHoApHILWV2Hg:dlUu6IXDNaHHfD/HfV2Hg","tlshash":"4d02fe6a49144e163017f1bea687afc2c52fcf07571c6a2b9b984f0d1f5f92dd6ab200","size":8990,"data":"","first_seen":"2025-12-22T16:49:15.615805Z","last_seen":"2025-12-22T16:49:15.615805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b9d909d349487d3ecd4ab1a11b455c2","sha1":"0e8bf55981e15b42df4d9f7edeac47a7452017ee","sha256":"0161cefed4fb10301eea56128067596487bca1b34bae23a896723fd181a28e3a","sha512":"626af22f0840c8cc8357eee0de61995fd9172238d3b9cbd424c64e98cdadee9387ffd0ba240ee43bf237de820bc9de6f4e8c30f6d9524a328a87b788fb016c39","ssdeep":"","tlshash":"9880000c3882803882b0280ea0388b28a882038f802ce280002e082000882882aa2038","size":29,"data":"","first_seen":"2025-02-17T11:11:01.088786Z","last_seen":"2026-04-12T03:34:16.816573Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57425d2606b86365a63f7f780030ee96","sha1":"6308c55621839ab4adee554e6a0c57d9023471e9","sha256":"3604e236658a240e5dd44ab2568735e3ad845f6443bb1f1119d6a5e0c8bc5739","sha512":"3b4beb4a616830c2620538277369c3b81ae9cadfca6e20f128526b5062ecbf356ca8bdf2012708a694e7f894156c5a746fa854cb9af63d59fd07a81a089bac63","ssdeep":"","tlshash":"94e0df2bcf0654e93f080a826bfb11493ae4142f520ac84af10ce2051fa89eb14fe2cd","size":370,"data":"","first_seen":"2025-12-22T16:49:15.623729Z","last_seen":"2025-12-22T16:49:15.623729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49e3714e16e8dd89c16202c9ce02f2d4","sha1":"048ca709de82d295cd53aa784fce341dc4c622b7","sha256":"0a2d7ad73901ba6769079b1f461b5d14ade3da65ef6404e1fa6c8c8cc963659c","sha512":"afe4853fa540d8e1ebd53d83c8a894cdc22f7a28c28b1a45a6774987c18f3802ca2024bef23bde9c08aae004590e5989d2e3ee7451130a6148dd9a0d64cd42d6","ssdeep":"","tlshash":"9f11af9d26ee20917573251ccb1f5100973fe12f8446ff84bcdc4356af84aa9922170d","size":909,"data":"","first_seen":"2025-07-18T17:08:28.097045Z","last_seen":"2026-02-03T17:46:21.920197Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/functions.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18e0ae8a5e893ac4a0a627aab0b1e77","sha1":"5f9a5af4087a771960e2c0d48d9e8a1bed836a75","sha256":"a8ef97c3c11d3d216259accfb864bd5360ef771aef244922331993eba0c35aa8","sha512":"1cd2156699d2dde75706fe1771ca0e3072ed9d9ff3011262b3a256457cf62a04414a99947cb9ec672fd16cf5e979e586235d0e51631e487a8853f09f66d85209","ssdeep":"768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP","tlshash":"3523a742e78b481728763638587e5589973c86b299c48c4abc9c53f81be0dbc5337f6e","size":47585,"data":"","first_seen":"2024-08-01T17:31:52Z","last_seen":"2026-04-10T15:24:07.550778Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74f1d3886dad96ef1e5ea8940cb8fc92","sha1":"bff27b2aebb3df720b419e7f1c476d7cf4d3325b","sha256":"69708f01d9147ade3f1d0ea668bc86dad0b3ed61b94948c4f65bd04ad4d2b77b","sha512":"1be748aeeab017231a24ec7544cba95c134ede3b73c0491f7fd493de15a7dc3d7d423728e893441a41ba41fb4b4f175195470d8b0ee41a565d5818b470e72e01","ssdeep":"","tlshash":"c9c0c00464603001891143c0109326df3c015073824c4c1d0e443100029420351b5006","size":165,"data":"","first_seen":"2025-12-22T16:49:15.624912Z","last_seen":"2025-12-22T16:49:15.624912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-12T13:55:20.466972Z","times_seen":331804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2f4526cd5134c814785aab83553a998","sha1":"e553d3482580e035ec85976443dc9e997800655e","sha256":"8f02be6ef66bf5779ed081ecfd7abca00adb6bed47857873af21920849b2b15e","sha512":"029dc89c0fa8b308bba18d2d9397c9d2b3c8ad6ac89c77e82097455dce98ef6e6b6e75d6495682586eaa635d91a29fe0145e3116af715e6aef16f0ff0e1f9f04","ssdeep":"384:IAxByPkahyY/B0TcvYJRcCKcP6A4o120F/+ManZPo0K5u:IAZsykB0TcvYJRt6KdOo0K5u","tlshash":"e2c26d3b449ca51f3f76a6817c45b14eb7a79600bd9c4379f4869c0e93acd1022fbb49","size":26468,"data":"","first_seen":"2025-11-12T14:16:45.405713Z","last_seen":"2026-02-12T15:09:53.277306Z","times_seen":2465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=31\u0026jzb=eJyNjj9PwzAQxb-L5zZOXTWl2RAg6AJI_Fmtk21aS845ss8ZQPnuPTOEBSE26_m93_2-xOSzp5iOVvRCP9893j7pV22PeRc-883D1b1YCTAmFqTvyrbbd-3hsB5TtMWQj8iFkgJ_nYnG3EtpfXKGRpdyRAgfHgGNa4DLkzvHTM42Jg4S7OBR8joG-_4jgSWElRgcgQUC0S-G9en_sAyApwInxw2H-u1FzIv5Mv3VHmGoo_9pV-oIySFdL2yO2LUylJIbJVWrdsydGFUvcNxs267Z6Hp27aOY5wvufn31\u0026v=2.306.1_prod-io\u0026ct=1766422116637","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93288a4eae74416232e9aefc3ba6db70","sha1":"5a4dfbfd23713bc113a557986ca7f76d0fd9bf49","sha256":"3e6189e274957cd50a0a927471d73bcab9fe06754c9b66ff72b10c6ecdea812b","sha512":"dbefc7019b866ed35e23507351b0148a51bd15801c29ba6a4c9f4b4f4ce112096e36c25387552f984a4e3c4e7ad6e3cd56b3e3da3586997143c470a870f1995f","ssdeep":"","tlshash":"52310006e02b4cb5cb4f47ced53b9ea384f054d6a3cc81d4e854ed2cc8d5579138a52b","size":1624,"data":"","first_seen":"2025-12-22T16:49:15.592302Z","last_seen":"2025-12-22T16:49:15.592302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbd9dea5347f5462a633bca1baa5d4e0","sha1":"fff3b874f1393d7876bcb8b41aadf6a7cf6add09","sha256":"b888aeb5610c432f6cfffab108883befb15fbad735e0c15d483beea15a17f603","sha512":"0e8031d3389cab027d44cfc0ab42c5dd8f27f84e4f45620b23b596698169a1872b5b725af5542273c4d964f0c9e279b67b56afd49839650eb8fcd693bc0f0bb5","ssdeep":"","tlshash":"efc08c3f1993233089b331bacb9b10842931726b2189d928bc1d45048f6a82e2c30d9e","size":183,"data":"","first_seen":"2025-09-28T04:45:03.434158Z","last_seen":"2026-02-03T17:46:21.924029Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/ac-pendo.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"069ba6b51aa83fe59b7c832cf74b02f1","sha1":"437e593ce2b2e06e15af9ba2a9d9cb28ca1774f7","sha256":"16873745f3fcbae49d616ff66a6d99ecda16fe4d87b51f8d480945d03e0be414","sha512":"d219e33733d6a18c3a4cbc242a36bc7c089731b47daca6bd481f06aec4c592ce9c2ec0fea2104d0fedee409c72959d57aecc4f61ae3a33afc5c0cb77ccf0c72e","ssdeep":"","tlshash":"4f01f6dd694815a75dac1478a07743ddf42f951f4d464c13cd5e445d1b147988e4f88c","size":797,"data":"","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-04-12T03:34:16.796654Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=f1a940cb-f0a8-44bd-8da5-d9aec8a9b799","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab51643012bf7f527f6f8902883cf621","sha1":"a3cd5d1c99bca442098b2f7032f991365c5515e9","sha256":"e7bc1c531e38c4b4426fc517ea855844f31a5d8bf1c6ff7a45e32eb92dbfad6b","sha512":"86c94fcaa070482734b5e9220da5c8c1e090c5459a91117b5a8baeb73a95a96cd4b84d38b01f44fd07e61da1b910023e64f3c353a6f7e8fae466bb6d1483b34b","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtspVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8koto","tlshash":"ef220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","size":10134,"data":"","first_seen":"2025-07-16T12:08:27.947071Z","last_seen":"2026-04-04T03:33:26.964517Z","times_seen":15469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js","fqdn":"cdn.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.36.213.229","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e63eca740331d2e0a9779817da0a829","sha1":"a8705367f4155c00ec13223ff6bdbb8b1f1e4d2a","sha256":"8f5ea80028708cd4ac0f17164ae93729d607eee50921aef14b91e70ba7f26557","sha512":"876f065635bdb237fcb999fb4ae6e405779291f191fd5b2ef34b095ebd94bc1de11415a1d397a62f67d78d0804aea2fe172b4fbc5393381d32610bb391bdd1bb","ssdeep":"24576:FZj5GXeB+qScO/cYMjfhJ60I8ZxEtvVnXoiHI:FZj5NB+qScO/MhvI8ZxEtvVnXFI","tlshash":"ec053ade31c6b03653a720ba806f100ab23b5d58681d4498f529d8ea3c7d98e5377fbd","size":829797,"data":"","first_seen":"2025-12-22T16:49:15.590128Z","last_seen":"2025-12-22T16:49:15.590128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-6727-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d8fbbd6d7d64422df03299da2caafda","sha1":"271a9eba31ff2f78c825a05ec09800aa34132c36","sha256":"4df2f52b665fa00981164a193f700dec20c9090c00e1702d0be64ce0894a73c5","sha512":"ea6369fca38f935a6f4868429160d48637831ce6bbb8d71f6e8db8bf6274940d8afa175466b540ae669580ae7ce8202f2e98b38a72835bfc96847566ebcc1cde","ssdeep":"384:HMdIt/6GlfCv+UvJGsL1x1WbBXdeMNhfOGi/Y4dKQgC2q7HZf7n+7u6Rr6oc8XoU:HqSyGlANRG41LWbBXdeMNhfOGi/Y4dK7","tlshash":"dc82f80545972c39e3da89c8b89a98683b1f2144780e41f5f56ebc2f4ae8ec5336379d","size":18731,"data":"","first_seen":"2025-12-04T07:17:58.792171Z","last_seen":"2026-01-12T09:51:18.013883Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-4439-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f31b1c9037b0a85af9d0f806e73e69d","sha1":"8407c528ece651ce00f69511bf8ae22f434ad4c9","sha256":"690235fd725674d3807a4652c068c8751d2a1843affef3be825387ec009869a9","sha512":"230a89e07559c560fdaae60839060296fe026492eb896459c8f39fa3b033109c3170ce52135efccff18f1771089c8f39f697ba6265ff7dcc7271aa28dad2a7f0","ssdeep":"768:XYLoOiN5uuoxQFqSBA5ZuM1dIn7uQVfe8hv80MZmWCCIJ2YPRe1pJu2f8TV8o3Fa:oLOPKPu7dZ8lo2YPsJi3FBds3HEWGYD","tlshash":"42e24a5ab95175329bdb81d9907f9a0db17c241eb00cc090e7caecf414b9e9a6067f2f","size":34233,"data":"","first_seen":"2025-12-04T07:17:58.788871Z","last_seen":"2026-01-12T09:51:17.959644Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform-cdn.app-us1.com/ac-frontend/maestro/assets/zendesk-widget.js","fqdn":"platform-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa722143f8ac4488d077c4b90999ace9","sha1":"9b075bd60828548d29ecc47546dc76d95f7d9137","sha256":"7cd44b191b6cad954cef4540ccc65d0d95f6489aa4ceed97122cec8cb4c3bc0d","sha512":"11c5207b5052108e61329cf8e68081638d674e04b78a05df985ed07ec405065128df00e8fffd4afc1d662d540d61272a3f9440fc918b690b9a46056e94beca3f","ssdeep":"96:BAYDv1o1C2fbIOWSZpXFqwFTIMATXM3/5Rr1ukadGjuGx+rGFom:SYD+13fbIOWSrVz5IMyyZ1ukzdxFFP","tlshash":"74c1a6a01628a938126f82df72b577503b64366fb41b8c40355ced05a319da3a0fbf9b","size":5669,"data":"","first_seen":"2025-09-23T02:01:46.768064Z","last_seen":"2026-03-08T17:36:45.462545Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-2229-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70beae639d8b966345526fca453a637","sha1":"e2f4198016b90ed60e6490d1a8cc5a393445e678","sha256":"d3529581c2f618b2b04cc42a4db8c2539725343a27e98f62943a5a0fea142a7b","sha512":"2a22d26cb10745a043b07eb351117c5c506eb7f45de5fde59d2a77db7f6316f1737c3fbd6dcb392d78d987f85f3313e6efae2dc4a8a61946a75d1da9e8ad35f0","ssdeep":"384:Lhk5FBQ43D+93Ar/Lc/tF6j04yef1iQ3L/LrfyimCPUzooNJhzO0cw6tarBoqfP/:Lhk5FBQ43q9QrDc/tz4yef1P7/LGTDzf","tlshash":"d282194960a325645a978dd8a1fb512d323fb40c3c4a816871adbcc74bff4d8321afa6","size":17968,"data":"","first_seen":"2025-12-04T07:17:58.728603Z","last_seen":"2026-01-12T09:51:17.958703Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-4256-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04828e11d8dae1da6b233f72043b0c31","sha1":"34f6d4ee01b3571a08682ee672eaddd58022fd0a","sha256":"7f5a2fc27e09971e544e78296cccb09bb0a3b96218c06d71ca8552733f3f902d","sha512":"98fa30184367f40640ba2e004e4e1a710606fa68a1890bb85ecbf22a4f5bf0992c6085d7700f63daa3bfb448fec2ba0bb5fd9e209b91f7598a97b8de44620696","ssdeep":"768:5p9NSX8Fhtdkhkl3iyt7d8Pn5tKjYqbXtlBqT6znuUPendVrZvQ3uHt55n+TewxY:r28XtuBs86q8end9ZIccTelCQ","tlshash":"d36307897591f0b257e391d9802f450bb23a5438b40d9490f3a9e9f528f6c9f912bf3e","size":68460,"data":"","first_seen":"2025-12-04T07:17:58.865528Z","last_seen":"2026-01-12T09:51:18.001301Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/ehawk6-init.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"977878af873a790782ab333f86281889","sha1":"d96e0344e4971042ee8c29842a7a29666a5239c6","sha256":"e6962bb62229b35e9426c31bf3d6671eea83d6fdf27c0b5981dd6ba3c62bf2c8","sha512":"d2250ca8c0681d1987feb9b5eaa6d7a40690841312cc949db0d5494d9f52c0abb2910736d738e2e51326caec948d92d66be9d8d31d627c6f24b9d16e7b023500","ssdeep":"","tlshash":"0b01fe54acf3dbb95a9078abe43ff189501794172818d8ae394eca040f077ca6d11aec","size":699,"data":"","first_seen":"2025-06-23T18:48:36.816832Z","last_seen":"2026-04-12T03:34:16.792607Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"data.pendo.io/data/errorlog?apiKey=ed3d50f4-0e02-4aa9-544b-e7c43ee11673","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"OPTIONS /data/errorlog?apiKey=ed3d50f4-0e02-4aa9-544b-e7c43ee11673 HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":179,"dns":4,"connect":17,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9b211b82aac28deb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 234626\r\nexpires: Sat, 12 Dec 2026 16:48:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FhDh4t%2F0f%2FV6t2Dx95eEwVA2Hw76jDcfSAFjbJRcvd9IFSmoJTy6ZBJpxDmmx7GcieOqYg7eOPb7Bz7aqb6g5Ak4kzsMrvgsc1JmwaGvFYiyKGHswj2AdQvnEdIL9X5V48PQCIWO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-12T13:59:34.535847Z","times_seen":139347,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":9,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/node_modules/@activecampaign/camp-core-css/dist/build.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /node_modules/@activecampaign/camp-core-css/dist/build.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"1667953338\"\r\nlast-modified: Fri, 19 Dec 2025 23:58:50 GMT\r\nx-envoy-upstream-service-time: 2\r\nexpires: Mon, 22 Dec 2025 20:48:33 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b829d0a56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1856241,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc2ce8bbb04b8c62f7d50f706b6732cf","sha1":"5ab9650e10cf58529259d95906e3bbcb0b4ec66f","sha256":"cf143bb532b9757734e7b5e427002e457f9db8f649d7db3713e57f9227d2d2b5","sha512":"b89f07a95f553cd5503deb0b2c25fca42394b0d896e1c6a3fd0284329be0950c6e8ffe0c4a64de8c3f43a697fe22205fbb1ce87800183e30fbce56de64aaa4a0","ssdeep":"24576:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9maZKmTKLxg4haTR+NTEwBSdh20:dNmEvSVlsi1KtMxnF/DMB+13kUZyV9m0","tlshash":"3f2521ac9230623f6c7be25aa3adfedc522a2140dc7145faf960f5110ac7ef5d91b124","first_seen":"2025-08-04T12:02:29.818712Z","last_seen":"2026-04-12T03:34:16.796118Z","times_seen":112,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d226aj4ao1t61q.cloudfront.net/haao08fw5_ac_symbol_blue.png","fqdn":"d226aj4ao1t61q.cloudfront.net","domain":"d226aj4ao1t61q.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.101","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /haao08fw5_ac_symbol_blue.png HTTP/1.1\r\nHost: d226aj4ao1t61q.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 1210\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Sep 2021 18:09:35 GMT\r\nAccept-Ranges: bytes\r\nServer: AmazonS3\r\nDate: Mon, 22 Dec 2025 03:18:43 GMT\r\nETag: \"f4c06408bb0a5e66978434484f1aa4a8\"\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: GJmBlMI_JzUZsEOKY-gI_73WCxk_DDSLmvIjYz61UTsyO7W71ckoFA==\r\nAge: 51031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"f4c06408bb0a5e66978434484f1aa4a8","sha1":"7221cbb713fd78bf5ae892fc4177ab13b6806531","sha256":"d86890d9704dc617468022e2e0e105414afcb3bd3b5e074b9b7484ba3c092a69","sha512":"327c48239e03962c97dedc309356f970c41411c866ebe0a1d4ba77fa644657757721e2bb4d5a6b486f8eb8a8d0ca41ce92d1d729e795705388735bba936f70c2","ssdeep":"","tlshash":"6c21da95e17d991c62cb7e65de8428b2bb2500a1725c37cf82cf8428bc9443594e63f2","first_seen":"2023-05-22T12:57:02Z","last_seen":"2026-04-12T03:34:16.797681Z","times_seen":533,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":2,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js","fqdn":"cdn.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.36.213.229","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 23:07:57 GMT","end":"Wed, 18 Mar 2026 00:03:52 GMT"},"fingerprint":{"sha1":"2C:B2:2A:47:53:14:A0:AD:A2:48:10:DF:2D:77:18:CE:37:9C:98:6E","sha256":"C6:96:1B:81:EB:C1:70:FC:62:3F:ED:DC:E6:6C:CF:81:CD:D0:A2:7B:77:1D:C0:EE:15:A6:6C:3A:E6:2E:0A:8E"}}},"request":{"raw":"GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js HTTP/1.1\r\nHost: cdn.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxMQctdcS0QGmkxe-4VdQF678KOe_3DY4Q1wK0fGVqP8j8ogf_6ma5_5WNuulGbFHLnjbU9q-2g\r\nx-goog-generation: 1766412513452751\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 274449\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=2iyuBQ==, md5=o6bPHS+IkUrsZ6VFdk7eFg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 274449\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\nlast-modified: Mon, 22 Dec 2025 14:08:33 GMT\r\netag: \"a3a6cf1d2f88914aec67a545764ede16\"\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nage: 0\r\ncache-control: public,no-cache\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":829797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65313)","md5":"4e63eca740331d2e0a9779817da0a829","sha1":"a8705367f4155c00ec13223ff6bdbb8b1f1e4d2a","sha256":"8f5ea80028708cd4ac0f17164ae93729d607eee50921aef14b91e70ba7f26557","sha512":"876f065635bdb237fcb999fb4ae6e405779291f191fd5b2ef34b095ebd94bc1de11415a1d397a62f67d78d0804aea2fe172b4fbc5393381d32610bb391bdd1bb","ssdeep":"24576:FZj5GXeB+qScO/cYMjfhJ60I8ZxEtvVnXoiHI:FZj5NB+qScO/MhvI8ZxEtvVnXFI","tlshash":"ec053ade31c6b03653a720ba806f100ab23b5d58681d4498f529d8ea3c7d98e5377fbd","first_seen":"2025-12-22T16:49:15.590128Z","last_seen":"2025-12-22T16:49:15.590128Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/js/index.909870bb.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:35.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /static/js/index.909870bb.js HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/?v=2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSv5U89nJTCZh0v89R4mH4lkh3FxLIOiN92l%2BpUFSuwpOBZAsCFAAF2F3REZeRQrWP9i1vZC0nKS3djrTv6FNFOFf0PpSx1sIVTZv9IeDt8JkDXmdIHq%2FdKSCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c597465624bf7a8b19f89c1ab29f8e6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b211b8dc9673181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167004,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"51493852c5e8ed8072b2e449298cf805","sha1":"e52cb50229c19deeca6cd08977eea83e6448e51c","sha256":"61d79018d8abb86a3884238226aaa19e96ca830b3f255d5e7b3b437be86ddd11","sha512":"d9b208399e04c2d4a085741bd28be28b58efed7041564bae33d76878591b63c9258a500ebde027f66a21d1cc5a92502c19d4ca562d377ce22dc84bc582bff97e","ssdeep":"1536:b7XGXdhARfdELsPaDlikHmIMkj+bUWo6pEHTXnRgf4jKCOYFdA6ANl9WNN5sAqWE:2dORf52li/IMaHTXhGCOYTA6mlfAqWCH","tlshash":"44f39689f6c170ea42e375e1011f610fa1b72a55f84f8980e266d4e4ecbd64f9027f6e","first_seen":"2025-12-20T15:43:46.238177Z","last_seen":"2025-12-22T16:49:15.591024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=f1a940cb-f0a8-44bd-8da5-d9aec8a9b799","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/snippet.js?key=f1a940cb-f0a8-44bd-8da5-d9aec8a9b799 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:34 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: SVbYdILbtq6jkajF8BXb1BgMdPNVkSUUAvMIVyhtu0vlwRYIFIxgkjSrNVzLl9N4Dg9/FmaQfwA=\r\nx-amz-request-id: BMTFKP17SG9XBGJX\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 16 Jul 2025 12:06:11 GMT\r\netag: W/\"ab51643012bf7f527f6f8902883cf621\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: RTwFLgtzxsenB5BRizZThKM6ycEhuUDi\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NvEf%2B8%2FSRJmsUzfmpvH3f1vjbxkw9ITIhIr8638OT78oDxN%2FcYiOYIFdZcnt2cbzt1tza0W%2BvMs3DDvzABmwWQYX%2FZiQhGcGtqCpY%2FB1qdTbGS48tJQ8a3ypYbaJnZIMz4o8Lec%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8a69afc272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10134), with no line terminators","md5":"ab51643012bf7f527f6f8902883cf621","sha1":"a3cd5d1c99bca442098b2f7032f991365c5515e9","sha256":"e7bc1c531e38c4b4426fc517ea855844f31a5d8bf1c6ff7a45e32eb92dbfad6b","sha512":"86c94fcaa070482734b5e9220da5c8c1e090c5459a91117b5a8baeb73a95a96cd4b84d38b01f44fd07e61da1b910023e64f3c353a6f7e8fae466bb6d1483b34b","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtspVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8koto","tlshash":"ef220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","first_seen":"2025-07-16T12:08:27.947071Z","last_seen":"2026-04-04T03:33:26.964517Z","times_seen":15469,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":46,"dns":2,"connect":1,"send":0,"wait":17,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:36.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"OPTIONS /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://solve-widget.forethought.ai/\r\nOrigin: https://solve-widget.forethought.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://solve-widget.forethought.ai\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9b211b950da256ae-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=31\u0026jzb=eJyNjj9PwzAQxb-L5zZOXTWl2RAg6AJI_Fmtk21aS845ss8ZQPnuPTOEBSE26_m93_2-xOSzp5iOVvRCP9893j7pV22PeRc-883D1b1YCTAmFqTvyrbbd-3hsB5TtMWQj8iFkgJ_nYnG3EtpfXKGRpdyRAgfHgGNa4DLkzvHTM42Jg4S7OBR8joG-_4jgSWElRgcgQUC0S-G9en_sAyApwInxw2H-u1FzIv5Mv3VHmGoo_9pV-oIySFdL2yO2LUylJIbJVWrdsydGFUvcNxs267Z6Hp27aOY5wvufn31\u0026v=2.306.1_prod-io\u0026ct=1766422116637","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"GET /data/guide.js/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?id=31\u0026jzb=eJyNjj9PwzAQxb-L5zZOXTWl2RAg6AJI_Fmtk21aS845ss8ZQPnuPTOEBSE26_m93_2-xOSzp5iOVvRCP9893j7pV22PeRc-883D1b1YCTAmFqTvyrbbd-3hsB5TtMWQj8iFkgJ_nYnG3EtpfXKGRpdyRAgfHgGNa4DLkzvHTM42Jg4S7OBR8joG-_4jgSWElRgcgQUC0S-G9en_sAyApwInxw2H-u1FzIv5Mv3VHmGoo_9pV-oIySFdL2yO2LUylJIbJVWrdsydGFUvcNxs267Z6Hp27aOY5wvufn31\u0026v=2.306.1_prod-io\u0026ct=1766422116637 HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-length: 693\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1624), with no line terminators","md5":"93288a4eae74416232e9aefc3ba6db70","sha1":"5a4dfbfd23713bc113a557986ca7f76d0fd9bf49","sha256":"3e6189e274957cd50a0a927471d73bcab9fe06754c9b66ff72b10c6ecdea812b","sha512":"dbefc7019b866ed35e23507351b0148a51bd15801c29ba6a4c9f4b4f4ce112096e36c25387552f984a4e3c4e7ad6e3cd56b3e3da3586997143c470a870f1995f","ssdeep":"","tlshash":"52310006e02b4cb5cb4f47ced53b9ea384f054d6a3cc81d4e854ed2cc8d5579138a52b","first_seen":"2025-12-22T16:49:15.592302Z","last_seen":"2025-12-22T16:49:15.592302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":157,"dns":0,"connect":26,"send":0,"wait":178,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/content.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/content.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"4007497913\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: HIT\r\nage: 5685\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828cfc56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2a4e0cf05a11c704221ebfd743f275e6","sha1":"cdafbcea3bde541a7018b40000464d4d745e0239","sha256":"97729aa5f5d2ac8bad4d5fb21afa3850098d6f2d10f0291e439057d2a9edacf6","sha512":"5031a7ae6f5023c42c43f541194b061aed87a91f087e8cc65699bf36004eef2f46f5c569b26772306e8efa1fc96798f744f33eb19a20a4a5f930f447000b65b1","ssdeep":"","tlshash":"86a002325a00c0359bb5cba4eb4617cc56449d75560564df9826a4bc03e3119c8a5b84","first_seen":"2025-03-03T13:00:18.11552Z","last_seen":"2026-04-09T10:04:25.3318Z","times_seen":105,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194605\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-04-12T13:27:16.685688Z","times_seen":5632,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-4256-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-4256-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: qRV3twhTrsLmqkZfzlCI/6U3NXAUoUzeyDRiIa6xQr51wGVqdT/fIG8Jpcb9wBGGkXeXya5njqA=\r\nx-amz-request-id: WN5TQ79932C23B9C\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:08 GMT\r\netag: W/\"04828e11d8dae1da6b233f72043b0c31\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:07 GMT\r\nx-amz-version-id: 9RiCajbxfbMVnLeUEEktSzaqVvxAZPXI\r\nage: 958703\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q%2F9CxaSHloRE6%2B9WBsXjnlnaVyuXE3i5YNIC6GIHjMd6Kj8SsyMCxQkTJ2BI5LCLxHDV43qG%2BB3Csa7S7KpJN%2BjGcBTiFCgO79NnPVt0qpzf45hfukJFBKIppQuesbt1rVX%2FXak%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8fcfa6c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68460,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"04828e11d8dae1da6b233f72043b0c31","sha1":"34f6d4ee01b3571a08682ee672eaddd58022fd0a","sha256":"7f5a2fc27e09971e544e78296cccb09bb0a3b96218c06d71ca8552733f3f902d","sha512":"98fa30184367f40640ba2e004e4e1a710606fa68a1890bb85ecbf22a4f5bf0992c6085d7700f63daa3bfb448fec2ba0bb5fd9e209b91f7598a97b8de44620696","ssdeep":"768:5p9NSX8Fhtdkhkl3iyt7d8Pn5tKjYqbXtlBqT6znuUPendVrZvQ3uHt55n+TewxY:r28XtuBs86q8end9ZIccTelCQ","tlshash":"d36307897591f0b257e391d9802f450bb23a5438b40d9490f3a9e9f528f6c9f912bf3e","first_seen":"2025-12-04T07:17:58.865528Z","last_seen":"2026-01-12T09:51:18.001301Z","times_seen":601,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.306.1_prod-io\u0026ct=1766422116949\u0026jzb=eJzNVF1v2jAU_S9-piQ2SQi8RW21UWkb2pi0D02WiS_FqmMH26GliP_ea4qyPkyoD3vgjfhcH597zhG_9yTsWiBToiSYoFY7MiBLZx89OB5UgwgdF0XGGKVFkbIB2SqvgnVcSbzE57efb77wBZczn-tnf_2x_IAEoq5tZ8LrzKgYF-lkctU6K7s6KGtwonMaoXUIrZ8miVQO6tCC89YIvVJGmBqGAoe3sLY-gBzWtkmEbJRJ8DZStZ5M98Rqyd8jKM69FWU6rf_PKgdUIxxatxDLWc8cXj_IfL4RVD1m7dcfXbn7uUTClRMNHMHq7vp5rh8qegvrTw9NhaAH75H1CK_K6kk-LTZ6pvNf5R2NroUmbl2vhTEQDbw5GhdFeNh0gK6RaYoB7gKgP1lRHgZ9wA0EcTbc8YWFexITf57To4W578R9XBEM__4tunHS2F_9p0yDQSD2Pn1_g656bjySIkQOxhLKEpayHHm3SBVfwOPhKC2GlMdnr5S9wLLQvix5lr0pi7ZCnisLw5ZdVFmi4JPMUT7JL89p_Os8OT3KJoc_L3iPzSU","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"GET /data/ptm.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?v=2.306.1_prod-io\u0026ct=1766422116949\u0026jzb=eJzNVF1v2jAU_S9-piQ2SQi8RW21UWkb2pi0D02WiS_FqmMH26GliP_ea4qyPkyoD3vgjfhcH597zhG_9yTsWiBToiSYoFY7MiBLZx89OB5UgwgdF0XGGKVFkbIB2SqvgnVcSbzE57efb77wBZczn-tnf_2x_IAEoq5tZ8LrzKgYF-lkctU6K7s6KGtwonMaoXUIrZ8miVQO6tCC89YIvVJGmBqGAoe3sLY-gBzWtkmEbJRJ8DZStZ5M98Rqyd8jKM69FWU6rf_PKgdUIxxatxDLWc8cXj_IfL4RVD1m7dcfXbn7uUTClRMNHMHq7vp5rh8qegvrTw9NhaAH75H1CK_K6kk-LTZ6pvNf5R2NroUmbl2vhTEQDbw5GhdFeNh0gK6RaYoB7gKgP1lRHgZ9wA0EcTbc8YWFexITf57To4W578R9XBEM__4tunHS2F_9p0yDQSD2Pn1_g656bjySIkQOxhLKEpayHHm3SBVfwOPhKC2GlMdnr5S9wLLQvix5lr0pi7ZCnisLw5ZdVFmi4JPMUT7JL89p_Os8OT3KJoc_L3iPzSU HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:37 GMT\r\ncontent-length: 42\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-12T13:55:36.388086Z","times_seen":789991,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform-cdn.app-us1.com/ac-frontend/maestro/assets/img/login/bg.png","fqdn":"platform-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app-us1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 03 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:BF:1A:91:C5:D0:67:79:06:B3:80:52:80:51:9A:6C:4E:C8:63:D3","sha256":"0D:DF:17:0B:18:F2:16:79:39:2F:34:12:E6:31:3E:36:54:CE:63:DE:93:65:76:DF:F4:F9:34:BD:D5:ED:53:CC"}}},"request":{"raw":"GET /ac-frontend/maestro/assets/img/login/bg.png HTTP/1.1\r\nHost: platform-cdn.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 530273\r\ndate: Sun, 21 Dec 2025 18:13:08 GMT\r\nlast-modified: Thu, 18 Dec 2025 18:10:17 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"eb3508b9f5aad62bbae49adf7f5c605c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UzTfq32IWObWqdznlcmzdZQbardl4zYqxMaAeJWDd_ugehjxwTSCVQ==\r\nage: 81327\r\nservice-worker-allowed: /app/whatsapp/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":530273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1594 x 1740, 8-bit colormap, non-interlaced","md5":"eb3508b9f5aad62bbae49adf7f5c605c","sha1":"87801aef4bb03bc45b2af3a2e7016a1899c76dcc","sha256":"9ab3a5608a65ea9ce2e66ba023d3ee08cf515e354a39ab862b70e82d72ff2215","sha512":"c7806fae97a5ac09e670e32103f9f55281747e0e9ab8d431e7da7617968817f4da0b17efc6308d73ae3c2a9a6e1ec7d299d8b9c7fe654162b3acf8a16baf7664","ssdeep":"12288:ZL8KuBIeoSqeQeci+CYdu53FaxAUeurB1svEMTcFdjwrflbCWBy2Xz:98KyqeQtQAi3FfUeuFavEMTkZwzlbJXz","tlshash":"ceb4234b6fc30f9340053904e97a23ea912a47d5afdc1a9e7551896e2d93b3027cff15","first_seen":"2025-09-30T10:48:07.849297Z","last_seen":"2026-04-12T03:34:16.787492Z","times_seen":63,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-4439-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-4439-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: E3kfGyFNyuA4w5YSr/mpVjLHIFKlSWUfGcu33o3QRNOA9NibMMZ9bbafH0/BAWwPxsyI07H+I2466ClgxpyWTsBk2DvWyi4K\r\nx-amz-request-id: WN5XP8C4NYFQ0GRP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:08 GMT\r\netag: W/\"5f31b1c9037b0a85af9d0f806e73e69d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:07 GMT\r\nx-amz-version-id: 1h5J_EXumm0P1CNe7qpWlv0FnM054iHD\r\nage: 958703\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n2LD%2FHuFiv6UPhKT6F7LvymRsI4S%2Fz3uPA6bntfAjjMhmEPl70dLFa6GCrQTtg1kq57ehg5Neoc2upkm%2BQr1%2B83GT5LHp8keBCmV8CusZ0Gs3hO6PSUk43y9nR5hi4COuKaoMiM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8fdfb5c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34233,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34002)","md5":"5f31b1c9037b0a85af9d0f806e73e69d","sha1":"8407c528ece651ce00f69511bf8ae22f434ad4c9","sha256":"690235fd725674d3807a4652c068c8751d2a1843affef3be825387ec009869a9","sha512":"230a89e07559c560fdaae60839060296fe026492eb896459c8f39fa3b033109c3170ce52135efccff18f1771089c8f39f697ba6265ff7dcc7271aa28dad2a7f0","ssdeep":"768:XYLoOiN5uuoxQFqSBA5ZuM1dIn7uQVfe8hv80MZmWCCIJ2YPRe1pJu2f8TV8o3Fa:oLOPKPu7dZ8lo2YPsJi3FBds3HEWGYD","tlshash":"42e24a5ab95175329bdb81d9907f9a0db17c241eb00cc090e7caecf414b9e9a6067f2f","first_seen":"2025-12-04T07:17:58.788871Z","last_seen":"2026-01-12T09:51:17.959644Z","times_seen":601,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T16:48:32.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/ HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-security-policy: object-src 'none';upgrade-insecure-requests;report-uri /csp/\r\ncontent-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'nonce-1d8f55a7b1c3b7ddaaea93630b7cd311' 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-attr 'unsafe-inline';script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-attr 'unsafe-inline';style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npermissions-policy: camera=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(self), payment=(), usb=()\r\npragma: no-cache\r\nreferrer-policy: same-origin\r\nset-cookie: XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs; path=/; secure; SameSite=Strict\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 70\r\nx-request-id: 3d2e38fd-6820-418c-82d3-8980bd26518d\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b7e398356b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.13.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"ActiveCampaign","description":"ActiveCampaign is email and marketing automation software.","website":"https://www.activecampaign.com","common_platform_enumeration":"","icon":"ActiveCampaign.svg","categories":["Marketing automation","Email"]}],"data":{"size":8120,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4f884738658bf20b1f2add711fa47aaf","sha1":"e9cdf05dbbd3d6869fe7de61486dc84a1d654afa","sha256":"1f48695511f19910721d3e6f67498d3d643332093451f3876cdc8c1dd20507d6","sha512":"cb9f17a58e7a8070c6681b7d1806c61603be579c7dd2a74bf19569007b545400bf824441c51ae5fadda9e2e37ef2808a18883f226b121100af08554e6170fe3b","ssdeep":"192:9uHtVvV4okqNVxskGjIFiAIZ7ZJd5KjZAF:0HtB310IFRIZ7ZyZAF","tlshash":"67f1d6454dfa886a307104e9bdb3724dad94f05bea04dd4c35bc93229fe8fca4c67988","first_seen":"2025-12-22T16:49:15.596057Z","last_seen":"2025-12-22T16:49:15.596057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/embed.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /embed.js HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPWTXoIzrVHWv98RKNTiy2W1Mri4eE75T6E56ad66gNiexCvEOjVpEqAfTDSlEDItp%2BIFN0bADYasYBO389sL8AQnxG3cktiORfJDrRZmp3W3LpsQqzPDI8%3D\"}]}\r\netag: W/\"ca6d2d12d9af2889f146e02750c47872\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b211b8c7e8e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202981,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65469)","md5":"2aae64bf7c87cbdeeb254170cd0caae6","sha1":"f7ebb4595435dfc30e0b24b56e5d442a9ec3bbde","sha256":"772b2892719f60ad727c62ce4d84f01327c01d7a9bc4a03134c19d46375c3870","sha512":"71150d3f34c5b39a3917e2fbb01847616adfc962c54858e0a388a201f8df05064683352ac4fdd66f2c8f5086f89e50d167a08ecf65068e8ccb1f73f7bbb5582c","ssdeep":"1536:zt/dDQhOcOXZ/gE/GRcM54bskHS2mq3NSzSDaEIHSiHslQivDV5oElz5b7AX63eK:fcgXQMsWS2NDqHS+za8w3e8nV","tlshash":"dd14f989f692f0b507f75194812f6207f23b2a28740e58e1faa5c5d5a87898f9073f7c","first_seen":"2025-12-20T15:43:46.327389Z","last_seen":"2025-12-22T16:49:15.596936Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":25,"dns":9,"connect":1,"send":0,"wait":19,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyNj0FPwzAMhf-Lz1vTZVphvSFAsAsgAefKSswWqXWqxO2Baf99Dpp2QoibZfn73vMRptRDCweRMbfG-JDIyUgpR8b-KzCyowqdhJkOMQv5ysXBoB8CG1jAQIIeBaE9whxykJjKGLw6u7fHl4fX7qPzu7zpv_P98-2TIj3yfsI96QVx9_kOpwWgc3FiuaLr5qapt9vlmKKfNDyygoxDgf5XsVhHTMRyd3XrSrsWh7VmZY2t7Ua9s6pKgq6rdd1Uq67ELkMsjstTuz8eupT_Ofml-OkM57N2tA\u0026ct=1766422116618\u0026v=2.306.1_prod-io","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"GET /data/recordingconf/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJyNj0FPwzAMhf-Lz1vTZVphvSFAsAsgAefKSswWqXWqxO2Baf99Dpp2QoibZfn73vMRptRDCweRMbfG-JDIyUgpR8b-KzCyowqdhJkOMQv5ysXBoB8CG1jAQIIeBaE9whxykJjKGLw6u7fHl4fX7qPzu7zpv_P98-2TIj3yfsI96QVx9_kOpwWgc3FiuaLr5qapt9vlmKKfNDyygoxDgf5XsVhHTMRyd3XrSrsWh7VmZY2t7Ua9s6pKgq6rdd1Uq67ELkMsjstTuz8eupT_Ofml-OkM57N2tA\u0026ct=1766422116618\u0026v=2.306.1_prod-io HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-length: 16\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4bc1a2f7bd228e37700f5ec59696f819","sha1":"1feb587afd0f919e018d5bb301c98a00eeddd677","sha256":"29ae093b7cb27e1c0c5f97dde205cd57655c993e838f5d3d2cbf7bc1fcbb7abc","sha512":"4d29f67f99e49422ffd9ba677d4368015534952d45b6ef9371fb6fedd891c570029955369bcc0b833fe460467200282f020061ab582b512d17852af42d129e03","ssdeep":"","tlshash":"7d6000000c003ccc0000c300033cc30030300c003003f033c000c03c30f3c000300c00","first_seen":"2023-07-29T00:24:04Z","last_seen":"2026-04-12T03:34:16.804189Z","times_seen":410,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":154,"dns":18,"connect":12,"send":0,"wait":139,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkN1vgjAUxf-XPjMRp_jxxtRt7EuiZNmyLORC62wsLbZFg8b_3Qsu7uOtvefXe07PgdiqYGRENMuUplx-EYdsueFW6ZDiPImmL5NZEic0ND2xN-P7wR0ikGWqlLZBrv2-3x4OrwqtaJlZriQCqVY7w3TMc9zu9X2_2-l4nj_seQ5Zs-pWQy0sQRjmEAHGPl6GbecnTWMgVJ3qMlswY9Dkl1RqgeeVtYUZuS7liNqCaaMkiCWXIDPWAky2ZStlLKOtTOUu0JxLF1-bMo3PJfwziqASCtDm4xMptikZLvqb7xsZ12U0CpZQGDI6IALoj0tfw0UYz-bJJFwEN0_TCTkiBZpJG0Naf0KWQjjEni8kijbg8V23mL-Vg-o9xUDLupdGDB7G-0isA2_KVs_rPCDHE5rWlf4\u0026ct=1766422116955\u0026v=2.306.1_prod-io\u0026recordingId=log","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"POST /data/rec/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJxdkN1vgjAUxf-XPjMRp_jxxtRt7EuiZNmyLORC62wsLbZFg8b_3Qsu7uOtvefXe07PgdiqYGRENMuUplx-EYdsueFW6ZDiPImmL5NZEic0ND2xN-P7wR0ikGWqlLZBrv2-3x4OrwqtaJlZriQCqVY7w3TMc9zu9X2_2-l4nj_seQ5Zs-pWQy0sQRjmEAHGPl6GbecnTWMgVJ3qMlswY9Dkl1RqgeeVtYUZuS7liNqCaaMkiCWXIDPWAky2ZStlLKOtTOUu0JxLF1-bMo3PJfwziqASCtDm4xMptikZLvqb7xsZ12U0CpZQGDI6IALoj0tfw0UYz-bJJFwEN0_TCTkiBZpJG0Naf0KWQjjEni8kijbg8V23mL-Vg-o9xUDLupdGDB7G-0isA2_KVs_rPCDHE5rWlf4\u0026ct=1766422116955\u0026v=2.306.1_prod-io\u0026recordingId=log HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 311\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:37 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/header.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/header.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"1509304327\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 3\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828cef56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38470,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (38470), with no line terminators","md5":"2623085f8b1ca33042e4a7ee0556775c","sha1":"f8cfda4ff6892aaa47a75e9d75653ab6598443f8","sha256":"a3a4dbe2475be08cad2979a2ca20a398d74aee08bcbea1662cb9d0633a7d3f2a","sha512":"9ca0d0f40cad339ff07d115e43930895da7058f0fff544198fb07756f3a5371cbe692ab5b3c0213b58c707386e6711d36530475e3303ac86acc954442a9cb27e","ssdeep":"768:bi9PoM9So8UFKiKqF6c+JKAChDzk95sjnPTY2A9Z0kwEKfnpD:e9PoM9SPUDvEKfnF","tlshash":"5c03a7b5e172710971139d59f582be6c2dfc0002aa1b3aeee53563348fc67dbe472948","first_seen":"2025-06-23T18:48:36.812703Z","last_seen":"2026-01-26T11:30:52.711771Z","times_seen":69,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/ehawk6-init.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/ehawk6-init.js?v=9898dcdc29ac46db HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"3586394214\"\r\nlast-modified: Fri, 19 Dec 2025 23:57:59 GMT\r\nx-envoy-upstream-service-time: 2\r\nage: 6225\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b82bd2356b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"977878af873a790782ab333f86281889","sha1":"d96e0344e4971042ee8c29842a7a29666a5239c6","sha256":"e6962bb62229b35e9426c31bf3d6671eea83d6fdf27c0b5981dd6ba3c62bf2c8","sha512":"d2250ca8c0681d1987feb9b5eaa6d7a40690841312cc949db0d5494d9f52c0abb2910736d738e2e51326caec948d92d66be9d8d31d627c6f24b9d16e7b023500","ssdeep":"","tlshash":"0b01fe54acf3dbb95a9078abe43ff189501794172818d8ae394eca040f077ca6d11aec","first_seen":"2025-06-23T18:48:36.816832Z","last_seen":"2026-04-12T03:34:16.792607Z","times_seen":89,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rxaij56vjege.cloudfront.net/media/logo.png","fqdn":"d3rxaij56vjege.cloudfront.net","domain":"d3rxaij56vjege.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /media/logo.png HTTP/1.1\r\nHost: d3rxaij56vjege.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 14241\r\nlast-modified: Fri, 08 Oct 2021 14:59:03 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 22 Dec 2025 02:07:57 GMT\r\netag: \"cc61aa0476fa8cde02bfd796601a1842\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 52m3tgdNHsUVruB7_g-LiT0rjSWwJfCuE88Z9GVYf8Pjk1x2ZXIW8A==\r\nage: 52839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 362, 8-bit/color RGBA, non-interlaced","md5":"cc61aa0476fa8cde02bfd796601a1842","sha1":"0d35d7849fea95e316062d8d3d890be03466efd8","sha256":"539ec10b0e8a870a764cbbe5b052892073926ac637fe6433ffe21e0b778d8055","sha512":"ff31cce1d018a22ccf80f40a204c288db0237690f2862d6d064dd29193fec79e912b1660b7a95d7f9081a735b9db0f9275c85d8f9e39d691f9d0559db1e393d2","ssdeep":"384:xCQCqfej9kQmz8RtgOP1RPPbEVAA9EHg7EAcENVCb6J:vC+ebmzKtg41QEHgJ9NVP","tlshash":"c752c02452d88eb5c0cd4bb8dd5a4de26931f606a01536fb1c6b766d098ec8f5c8c7bc","first_seen":"2023-05-30T15:37:27Z","last_seen":"2026-04-12T03:34:16.811449Z","times_seen":106,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":17,"dns":134,"connect":1,"send":0,"wait":5,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /?v=2 HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-transform\r\netag: \"a688f2856707305a4a0b467c4f00db2f\"\r\nlink: \u003chttps://solve-api.forethought.ai/\u003e; rel=\"preconnect\", \u003chttps://static.cloudflareinsights.com\u003e; rel=\"preconnect\", \u003chttps://cloudflareinsights.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnbeUazNUQIFGHI1mBjSJPBYCNYAwGnREdllAJvVMFYCBCaLEH%2BLKpdlDOiNshH0dnlWn0sU28tD84WOFFhM7f%2Boo0AHCSPUszQYLxdrO0ByRy8Qg1wO1KrMfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b211b8d3ffe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (568)","md5":"ff48458fcdbbe1326c70b4334520dc82","sha1":"cc7c9f9067ae09bceceabd3631f87c22abf85d86","sha256":"63988619105281014265609c39e9c2a897ad218e868934937f7fb5b082e49bdd","sha512":"952f1e5028391ca5390cf819d038efcf46a2345fc8924da6b8d7b783ceac4df93852232a8bcfaf15f51d25b6040837268b38bbacfe8a2beda3aecdade45ca5e8","ssdeep":"","tlshash":"813133ef0498c459b102e0a478e17e3e484b508f27f9e4f1f9878657cec13e8c6a7a49","first_seen":"2025-12-20T15:43:46.236709Z","last_seen":"2025-12-22T16:49:15.600004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Comfortaa:wght@300..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:35.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Comfortaa:wght@300..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Merriweather:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Dec 2025 16:48:35 GMT\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121767,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f07db6ad900ac856a71adbdd3282ff25","sha1":"cb3953f7d52acdb682bc3dceb865059bfb55c9ce","sha256":"7854ec36e4bb012b23149e24978a4bf957539d1fe6c94f99ef7febcfcf3b41d5","sha512":"667c0e5c82ec7c2e51e1e07aa3620459e7fdf43aec642d88ab1dbabe845c245932eb7c8010556be17dd7ffd81cde527b08d891d4bca1503bd0e7da30e870ee92","ssdeep":"768:GJcRmFt6n3wafwe0u1EA3mkiDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFL7:l5YRdvI0rAwyECNqHvDyWNpQv","tlshash":"20c330a1042b9044eb834cd233cf7e36fe0ea2647040d179abfd5a9aaddbc66536475c","first_seen":"2025-11-19T09:01:31.927138Z","last_seen":"2026-02-19T11:57:17.347726Z","times_seen":119,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-2229-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-2229-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 1sTbYU43aVV8vJMgf9DKolT4XEQujZ8u5xW7D1C+POuy766+OIY+YaF3MOhqw+TK+86Fm0S6pY4=\r\nx-amz-request-id: WN5QM5759F3PPWVE\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:08 GMT\r\netag: W/\"d70beae639d8b966345526fca453a637\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:07 GMT\r\nx-amz-version-id: 8FGFoC8psdG4ytVjBpleecOpOVJkeGNb\r\nage: 958703\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8W0IkIzB%2BXAxnkFAYcuqsY%2BAu0bPooNtr3fGJGyZFUnQd92XC1QMZcRSYY65fO3L0TYLshm2lvYycwlUNTLv6gjXb1ICTv5PBbbCuhekOKlHtHlfKT72G7UMW%2BVA%2Ba8LfKHWe0M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8fdfc5c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17968,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17968), with no line terminators","md5":"d70beae639d8b966345526fca453a637","sha1":"e2f4198016b90ed60e6490d1a8cc5a393445e678","sha256":"d3529581c2f618b2b04cc42a4db8c2539725343a27e98f62943a5a0fea142a7b","sha512":"2a22d26cb10745a043b07eb351117c5c506eb7f45de5fde59d2a77db7f6316f1737c3fbd6dcb392d78d987f85f3313e6efae2dc4a8a61946a75d1da9e8ad35f0","ssdeep":"384:Lhk5FBQ43D+93Ar/Lc/tF6j04yef1iQ3L/LrfyimCPUzooNJhzO0cw6tarBoqfP/:Lhk5FBQ43q9QrDc/tz4yef1P7/LGTDzf","tlshash":"d282194960a325645a978dd8a1fb512d323fb40c3c4a816871adbcc74bff4d8321afa6","first_seen":"2025-12-04T07:17:58.728603Z","last_seen":"2026-01-12T09:51:17.958703Z","times_seen":600,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/errorlog?apiKey=ed3d50f4-0e02-4aa9-544b-e7c43ee11673","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"POST /data/errorlog?apiKey=ed3d50f4-0e02-4aa9-544b-e7c43ee11673 HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 3549\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3549,"data":"{\"error\":\"[indexedDB cache error:open.request.onerror: ]\\ne.prototype.openDB/r.onerror@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:311748\\nEventHandlerNonNull*e.prototype.openDB@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:311717\\ne.prototype.list@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:313739\\ncm@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:328502\\nxm@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:331101\\ncv@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:338843\\nlv/lv.pending\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:339072\\nAsync*lv@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:339040\\nZm/n\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:335911\\nKn/this.trigger/\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:73398\\nk@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:21366\\nKn/this.trigger@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:73371\\nl@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:75764\\nKe@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:19244\\ns@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:19445\\nqu\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:151507\\nAi/\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:80244\\nQv\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:368825\\nAi/\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:80244\\niy/\u003c/\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:369709\\npromise callback*iy/\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:369684\\ne/dt/be\u003c@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:21575\\niy@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:369599\\nry@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:369845\\nEventListener.handleEvent*ne@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:104527\\nHd@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:161121\\noy@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:369970\\nCS@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:539559\\n@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:539941\\n@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:539955\\n@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:10:539958\\n@https://cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo-staging.js:11:3\\n\",\"version\":\"v2.306.1_prod-io\",\"visitorId\":\"_PENDO_T_dIs5lzsCH8G\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:37 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform-cdn.app-us1.com/ac-frontend/maestro/assets/zendesk-widget.js","fqdn":"platform-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app-us1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 03 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:BF:1A:91:C5:D0:67:79:06:B3:80:52:80:51:9A:6C:4E:C8:63:D3","sha256":"0D:DF:17:0B:18:F2:16:79:39:2F:34:12:E6:31:3E:36:54:CE:63:DE:93:65:76:DF:F4:F9:34:BD:D5:ED:53:CC"}}},"request":{"raw":"GET /ac-frontend/maestro/assets/zendesk-widget.js HTTP/1.1\r\nHost: platform-cdn.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 22 Dec 2025 16:47:53 GMT\r\nlast-modified: Thu, 18 Dec 2025 18:10:19 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=0, must-revalidate\r\nserver: AmazonS3\r\netag: W/\"aa722143f8ac4488d077c4b90999ace9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: oHp7HnSvQ1zlHZAXs3cHupKNi_yFOcBsn7Ubl2R0j6EECCByql5lcQ==\r\nage: 41\r\nservice-worker-allowed: /app/whatsapp/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5669), with no line terminators","md5":"aa722143f8ac4488d077c4b90999ace9","sha1":"9b075bd60828548d29ecc47546dc76d95f7d9137","sha256":"7cd44b191b6cad954cef4540ccc65d0d95f6489aa4ceed97122cec8cb4c3bc0d","sha512":"11c5207b5052108e61329cf8e68081638d674e04b78a05df985ed07ec405065128df00e8fffd4afc1d662d540d61272a3f9440fc918b690b9a46056e94beca3f","ssdeep":"96:BAYDv1o1C2fbIOWSZpXFqwFTIMATXM3/5Rr1ukadGjuGx+rGFom:SYD+13fbIOWSrVz5IMyyZ1ukzdxFFP","tlshash":"74c1a6a01628a938126f82df72b577503b64366fb41b8c40355ced05a319da3a0fbf9b","first_seen":"2025-09-23T02:01:46.768064Z","last_seen":"2026-03-08T17:36:45.462545Z","times_seen":56,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":22,"connect":5,"send":0,"wait":23,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194605\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-04-12T13:27:16.685688Z","times_seen":5632,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/js/async/438.4f9f49cc.js","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:35.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /static/js/async/438.4f9f49cc.js HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/?v=2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvS4IYF0WZCXckGEHEMMx0mMnFdGyCt7pWPbkZGAsyd8XYsJ1DpLdyeEHdFaYWZfCyCgffAbEXTET9j4ATdJ0aK8mTZ18e99QS5JdfZ%2FpZNDIUHRNfP%2B9CnjAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5f631bd0948106fb5ef6561a4ab93e9d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b211b8e9b7f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2625350,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)","md5":"e71886a98b9f577e62221ca789559062","sha1":"7837e6cc56a162e95480736ae709956df0191021","sha256":"b07de947ed30c9e5197cb9bddf27f336dd4a3b3f0b23ef928c8dcc435419648e","sha512":"9690be8f237037d65438ddb8abf06b41fe6d4d8f8290eaa01f19677d34566e4cce1be49395be0dc914a6d7863bb7dc7eda8e45096b0ddbc4f651e4c297a7ef97","ssdeep":"12288:AofSnrEg0PHh/TjtVEzwq4KJ7ULvmTJK9gCMwbCnDyxwv0LIYAKYGS5gm:T6nSPH1FVEjneMznonwbd","tlshash":"ba256ce87282f06187f7459580bf4207f33d2a25280e8828f262edda7574999b177f7d","first_seen":"2025-12-20T15:43:46.33328Z","last_seen":"2025-12-22T16:49:15.602096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-6727-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-6727-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: JuXr52FY4TRa43yQZKsslOa74K7JwB+wyd+U5QgUVeJHpBPfyW/WiT5c/zvm8JUdWjSzfK31mYj6P5HZjDzF6pf66sSogJqzr2AzD/oE5oM=\r\nx-amz-request-id: WN5MC0KAWJYVAYGV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:08 GMT\r\netag: W/\"6d8fbbd6d7d64422df03299da2caafda\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:07 GMT\r\nx-amz-version-id: netgzKl9_r6yHWpKjx7v3RlNXVIGaz9W\r\nage: 372500\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IE9B4dv4B6CLkidQYL09L9Bwg7xMeV0E1dun00XGL1mTpS0VVb8oa9JJEp7C6M3MmBkm11Rqob7tN3csKieYCE2ZhsQssDocG16CHT1mwdNnkVbopUnK17qy0HUoiJY9BIkkpoc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8fdfc1c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18731,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18731), with no line terminators","md5":"6d8fbbd6d7d64422df03299da2caafda","sha1":"271a9eba31ff2f78c825a05ec09800aa34132c36","sha256":"4df2f52b665fa00981164a193f700dec20c9090c00e1702d0be64ce0894a73c5","sha512":"ea6369fca38f935a6f4868429160d48637831ce6bbb8d71f6e8db8bf6274940d8afa175466b540ae669580ae7ce8202f2e98b38a72835bfc96847566ebcc1cde","ssdeep":"384:HMdIt/6GlfCv+UvJGsL1x1WbBXdeMNhfOGi/Y4dKQgC2q7HZf7n+7u6Rr6oc8XoU:HqSyGlANRG41LWbBXdeMNhfOGi/Y4dK7","tlshash":"dc82f80545972c39e3da89c8b89a98683b1f2144780e41f5f56ebc2f4ae8ec5336379d","first_seen":"2025-12-04T07:17:58.792171Z","last_seen":"2026-01-12T09:51:18.013883Z","times_seen":600,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3tnn7lar6ozas.cloudfront.net/08f2ced6-ee5d-45e3-a248-5828d7d63950.png","fqdn":"d3tnn7lar6ozas.cloudfront.net","domain":"d3tnn7lar6ozas.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:37.430Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1\r\nHost: d3tnn7lar6ozas.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/font/PlusJakartaSans[wght].eb5c52ed.woff2","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:37.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /static/font/PlusJakartaSans[wght].eb5c52ed.woff2 HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://solve-widget.forethought.ai/static/css/async/438.c963a723.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 60612\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"1a05ff1d0d5a7402e0798e3ef7551572\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oF%2FuL1Q16nYooozbdmF8INPcGPjD%2FtdSGSqPqc7K1UO7CbxvEymGTbagStM6UUfPfPiXd8Ab8JFyzF577pBhfqkO%2FWIgSJZmkBUUP3D9tSp5SEo8vU3Q9n9i8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b211b9a1e973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 60612, version 2.4653","md5":"fe809dcee8be66a4cfed8512dc5f8419","sha1":"2936d26ce81b64dab96aeb37947aa4cda0771a05","sha256":"49c62cf1fb70f225ea113361f0134a48858c3a7d0175173aa3e38a0c6c8539d2","sha512":"99109d460cba467fe8dced8b52962fce4ea4c86e3acf78579d94a2f1287fc4cae7dd13e14242bad8056ab58680bac0e808b228b01e84a0cb925929768830fa0a","ssdeep":"1536:q04OxFsNiK7jezIdf/LkGgjqQHSCy47tld/AHh+Xz:q04MFC78Ixnxic47t7/AH8Xz","tlshash":"ff43028e486d35098f6fafb28c78895df459a8624b0a691ec00f7ec291137d4dc4feb5","first_seen":"2023-11-07T09:25:02Z","last_seen":"2026-04-12T03:34:16.799249Z","times_seen":463,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/default.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/default.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"3588445950\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: HIT\r\nage: 5685\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b829d0956b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65501,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65501), with no line terminators","md5":"6668597d468e9ea5470b3233071393ae","sha1":"5b4b968f805b93a9e6dc0b2f90b85b9a52a40b9f","sha256":"2fc9fdb574d11a3a36fb6c790f074d9de98471d57f2840db043318a6355f681e","sha512":"85b08010efa1d16ba8a8916a087501f85593546959526e9a5fc0a54f483eb1816aa8e69fd1b4ca9ff7c619caaca2d5627b996eb22c481ed7a3648c2aa17da6e7","ssdeep":"768:XAkqd3tStf7pUF7DXBRv3IjSfxoK0ZjwGcgZ3sfBbxuwiA1Um7vY:cTSUFnB5ASZwwGLunjTY","tlshash":"62533b32e587201e756fd0bbf412eace7d18a957e1678fbafda4b274c4800e51527b02","first_seen":"2025-08-29T21:23:27.864404Z","last_seen":"2026-04-09T10:04:25.30813Z","times_seen":82,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/jq/notification.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/jq/notification.js?v=9898dcdc29ac46db HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"1465114866\"\r\nlast-modified: Fri, 19 Dec 2025 23:57:59 GMT\r\nx-envoy-upstream-service-time: 2\r\nage: 6220\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b82ad1f56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c9244a53cf44e50b3fb6c0e2bc2aec38","sha1":"e4aea45cbe5b546a1dcdb57f7ca9286808f8ce0c","sha256":"7676abec852facaaa77246da43ef04bb4d52386f23f40ead92d3cff35f482d3c","sha512":"5ba51b344b2514c601275e8937d1220e944e77fa87bae24cd5ea7a66537f4eaa124f6aa313ae5ef95ccba33157a105b0169a825674887d3d6cc453f9e8a94299","ssdeep":"","tlshash":"9921234da2de51ac99f230be593e66ec573f51244625fcb67df341f40880c486362a6a","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-04-12T03:34:16.800845Z","times_seen":140,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/ac-pendo.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/ac-pendo.js?v=9898dcdc29ac46db HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"2723515937\"\r\nlast-modified: Fri, 19 Dec 2025 23:57:58 GMT\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: HIT\r\nage: 5684\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b82bd2f56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":797,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"069ba6b51aa83fe59b7c832cf74b02f1","sha1":"437e593ce2b2e06e15af9ba2a9d9cb28ca1774f7","sha256":"16873745f3fcbae49d616ff66a6d99ecda16fe4d87b51f8d480945d03e0be414","sha512":"d219e33733d6a18c3a4cbc242a36bc7c089731b47daca6bd481f06aec4c592ce9c2ec0fea2104d0fedee409c72959d57aecc4f61ae3a33afc5c0cb77ccf0c72e","ssdeep":"","tlshash":"4f01f6dd694815a75dac1478a07743ddf42f951f4d464c13cd5e445d1b147988e4f88c","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-04-12T03:34:16.796654Z","times_seen":145,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/EHawkTalon6.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/EHawkTalon6.js HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:34 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"6945e54e-18158\"\r\nlast-modified: Fri, 19 Dec 2025 23:52:46 GMT\r\nx-envoy-decorator-operation: ac-hosted-current-web.activecampaign-hosted.svc.cluster.local:80/*\r\nx-envoy-upstream-service-time: 2\r\nage: 6751\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b89fae456b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65061)","md5":"7a965fa1bff0d7d24bc10c99ab4c6107","sha1":"f35647572142ac3a3167a7f09089e9a63cf38138","sha256":"54c0d489f8d98b5eccf7c48ae0db4f9aee4be50a9c57de9bbdd912683a5fa99b","sha512":"8bc69abac38ffbbc29ef80c929fa0110f1722b34c808a6b90b93dee357fedae0de0650d258deac75223ddf5c78650ccae1e01c3447ea949d479a13e683f262a8","ssdeep":"1536:CIQqXQoLZjBB3ovdzxo3MaidyI7N8JVdCgFZcrX/CLhfUSE5am:bQMjnydz2BJHdCCD2B","tlshash":"21a3c5c9f2c7b0a613e364a5006f610ae27a6d58b40e99c2d266e5d0fc7894f5037fbc","first_seen":"2023-10-29T20:47:24Z","last_seen":"2026-04-12T03:38:55.112764Z","times_seen":155,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: j0y8QyBst1xDK8mCw4lLhSXt0W/5oePjE7rMmId1FpJH8mjyG/YUtOHNz+C2X6NNxtclsUl+GqXoJ1xClYgti7bp0YkjPOD1\r\nx-amz-request-id: ZMJQNC0N2SXBXKXX\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:09 GMT\r\netag: W/\"a086abe9b48c00561ed655fe18419275\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:08 GMT\r\nx-amz-version-id: 36IHkbsaTjdiFynj.c0ITU4vobPoSbCp\r\ncf-cache-status: HIT\r\nage: 293963\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KNSHlV6D3%2FVDrKgWIOYZcfnaP08QdcdrLFl6G7lop%2BUiCtHstzfJMBtP0JDQl5sO1nVIzoc%2BbPrn1lPaRcmcngvvbsq%2F1zbNSdzrU4tkzKNuP4ayoAWaM%2FFVlZJs4XCOWmW62rI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8dea95c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":754333,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65307)","md5":"a086abe9b48c00561ed655fe18419275","sha1":"4f43b889e740bb2371d2aff4a32cffe68138efca","sha256":"98546ac7de4a49108c29c479218832dc89677e8848390568f460df358b5ea120","sha512":"b7bc61c2eb6c03fd47e814c493817e707817687d7cab7b0d4fd78ffc71316a5f0e4a87e526a8c38c75c6aefbe4dc736918246326a4d488c9d94426410b08caa6","ssdeep":"12288:UUrHdlPYvaBH3FezFaaWHClkTMO1zNxEuiMfJOoRbIy:UUhlPYSPezFaahlkTMO1zNxEwYoRbIy","tlshash":"54f44ac974d2b06647e721a2407f100bf33a2e19780d8450f265ecdabeb994da277f6d","first_seen":"2025-12-11T15:44:01.012641Z","last_seen":"2026-01-08T10:46:33.834851Z","times_seen":721,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.pendo.io/data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5\u0026ct=1766422116639\u0026v=2.306.1_prod-io","fqdn":"data.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.107.204.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:36.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 05:52:56 GMT","end":"Fri, 13 Mar 2026 06:48:51 GMT"},"fingerprint":{"sha1":"22:50:79:FA:B5:6B:E8:81:6D:24:7A:AA:A4:1C:53:F1:8F:7E:1A:0A","sha256":"A9:29:DC:BD:96:CE:77:E9:13:90:49:37:43:BE:90:7A:FE:02:1A:63:3A:88:2E:14:E2:F8:C7:F9:39:5E:04:C6"}}},"request":{"raw":"GET /data/guide.gif/ed3d50f4-0e02-4aa9-544b-e7c43ee11673?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5\u0026ct=1766422116639\u0026v=2.306.1_prod-io HTTP/1.1\r\nHost: data.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: no-store\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-length: 42\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-12T13:55:36.388086Z","times_seen":789991,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":170,"dns":2,"connect":29,"send":0,"wait":154,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflareinsights.com/cdn-cgi/rum","fqdn":"cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:36.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"POST /cdn-cgi/rum HTTP/1.1\r\nHost: cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\ncontent-type: application/json\r\nContent-Length: 1695\r\nOrigin: https://solve-widget.forethought.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1695,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1766422115388,\"versions\":{\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"ae143864-7026-4034-b0da-119fe2daf375\",\"location\":\"https://solve-widget.forethought.ai/\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":97,\"domContentLoadedEventStart\":229,\"domContentLoadedEventEnd\":232,\"domComplete\":1194,\"loadEventStart\":1195,\"loadEventEnd\":1195,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":30,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1195},\"siteToken\":\"bd172e8306bb4b719a50fdb736253094\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\naccess-control-allow-origin: https://solve-widget.forethought.ai\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9b211b951db356ae-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-api.forethought.ai/workflow/widget-config","fqdn":"solve-api.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"104.17.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:37.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:56:35 GMT","end":"Wed, 11 Feb 2026 06:56:26 GMT"},"fingerprint":{"sha1":"A3:63:2C:8A:B3:9F:AE:4B:CF:69:57:3F:4D:83:33:65:49:82:3F:57","sha256":"C5:61:D5:F7:A1:A6:BF:63:0A:BA:0B:6B:69:B9:A1:67:55:9F:56:11:CE:A2:82:D6:AD:D0:E0:24:CC:54:C8:20"}}},"request":{"raw":"POST /workflow/widget-config HTTP/1.1\r\nHost: solve-api.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nContent-Type: application/json\r\nAuthorization: Bearer 2310ff96-9b16-4a77-9601-827429c9507c\r\nis-config-preview: false\r\nis-draft: false\r\nis-preview: false\r\nsolve-origin: https://directpersonalfinance.activehosted.com\r\nContent-Length: 823\r\nOrigin: https://solve-widget.forethought.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":823,"data":"{\"parent_url\":\"https://directpersonalfinance.activehosted.com/admin/\",\"raw_params\":{\"src\":\"https://solve-widget.forethought.ai/embed.js\",\"async\":\"true\",\"id\":\"forethought-widget-embed-script\",\"emit-tracking-events\":\"true\",\"data-api-key\":\"2310ff96-9b16-4a77-9601-827429c9507c\",\"data-ft-workflow-tag\":\"login\",\"data-ft-originatingdomain\":\"directpersonalfinance.activehosted.com\",\"data-ft-user-data\":\"undefined\",\"data-ft-randomizer\":\"2\",\"config-ft-ignore-persistence-parameters\":\"async|data-ft-originatingDomain|data-ft-randomizer|data-ft-embed-script-language|data-ft-user-data|data-ft-current-page-url|data-ft-cookie\",\"data-ft-embed-script-language\":\"en-US\",\"data-ft-current-page-url\":\"https://directpersonalfinance.activehosted.com/admin/\",\"data-ft-cookie\":\"false\",\"initial-intent-id\":\"8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:37 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\nx-internal-trace-id: 694976658ca35fb705170619\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-internal-trace-id\r\naccess-control-allow-origin: https://solve-widget.forethought.ai\r\nvary: Origin, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b211b971ab75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14789,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd01e2795dc773d9f2c4ca632dbc9ce7","sha1":"92c828292d3ec504d2379dc4bc5e775cfa55a273","sha256":"78222a27d85f2d7c143bb984afe9c55923fb0597e78aac2d7e3bbc7c498a56fb","sha512":"c0eac5ffdee02628dc154b04d45494afd14b127dc08ffed7d77c42843a19d9b3e674ad9f325cc847b2801eed2483e1981803fbdd4be46dbf83f6d9fe1119d165","ssdeep":"384:S4Q9thUVh4tM+GxRcAsaXLhTPVn1OfyUOil8hCIq0rP/NxrS1:6UVhOGfcAsSLhTPh4yUOil8hCIbPlBS1","tlshash":"b9622b5ae1005a7e02db8352f65f7a665a7870f737c04cb49cb8863c51f6b982373b4a","first_seen":"2025-12-22T16:49:15.60619Z","last_seen":"2025-12-22T16:49:15.60619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform-cdn.app-us1.com/core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css","fqdn":"platform-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app-us1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 03 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:BF:1A:91:C5:D0:67:79:06:B3:80:52:80:51:9A:6C:4E:C8:63:D3","sha256":"0D:DF:17:0B:18:F2:16:79:39:2F:34:12:E6:31:3E:36:54:CE:63:DE:93:65:76:DF:F4:F9:34:BD:D5:ED:53:CC"}}},"request":{"raw":"GET /core-platform-core-resources/jquery-ui/1.13.2/css/smoothness/jquery-ui.min.css HTTP/1.1\r\nHost: platform-cdn.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Aug 2022 18:56:35 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Mon, 22 Dec 2025 16:47:48 GMT\r\ncache-control: max-age=0, must-revalidate\r\netag: W/\"b6ffcf9edf281e009b6d8a4f00545f6a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: iRtbj5rwOu6aGjjX-55C7qMuyNoVGyZZPdVVaeFF_3cYsg_91ImI0Q==\r\nage: 46\r\nservice-worker-allowed: /app/whatsapp/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":28988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28988), with no line terminators","md5":"b6ffcf9edf281e009b6d8a4f00545f6a","sha1":"0ed8139ab27bbbd7c19c7da57bb8c3e34c7a2aa8","sha256":"d2553e8b21c07d36d7548259f0ad1e10c4e7baa77128c49aebba918f2881126a","sha512":"14033dd2292e4fd6dc17b96579b2228a6095dd603c1eadeccb414273c3e2fad7d06811dac5ac63c6f964dbbcaad0c86d80bd1d684bf6ccafba6a1c3ed825612d","ssdeep":"384:xgsa5cvR3u1eAUJwamUr2uZG6buqESc7nfZBhVf:xpJGUJHmvuZG6buqUBhN","tlshash":"69d24030a4c2253dfe33d13061e11ef4513bc252eea25fbda09ab75953ea8e4857b871","first_seen":"2023-05-16T01:05:50Z","last_seen":"2026-04-10T15:24:07.548227Z","times_seen":620,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":74,"dns":63,"connect":1,"send":0,"wait":43,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/ac_global/jsc/auth.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /ac_global/jsc/auth.js HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"2531885328\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:19 GMT\r\nx-envoy-upstream-service-time: 3\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b827ce456b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":54950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (900)","md5":"381be67ac0dc078d83e783bb29d3dfa2","sha1":"9a279f03ad366bf114061ac62bef5343d2801cea","sha256":"497393c78db621dba4453991eebf1a46db62625146c61af03879716cf0f628eb","sha512":"2bf32aaf40fa411e0b360b32733fd0f5c7948902a405f2f2cded9941b34bd597ff20f09bf7fca32f078d5087a9c864bb6f9eb1a890cfdf2d8019025d25acae06","ssdeep":"1536:0SBhsMU3+AXRc77VOXhO1t5s7+wd7gNSh0Hc+vzvODECUJcQf2c3fc3vOFP3Yy:C3YEXhO1t5s7+wd7gNShKDbW6JcQ+c3j","tlshash":"7233d98e734334c742b6057e119f9387aa34a7d1b7a418f1d1d5c89068a897903ebfbe","first_seen":"2025-03-24T12:19:41.822214Z","last_seen":"2026-03-24T17:09:47.427759Z","times_seen":97,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/footer.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/footer.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"2253942309\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828cf156b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1581), with no line terminators","md5":"aff65cd1663631db8b77278d08d7fbd8","sha1":"90009d01fb200eeae826a273aa70229278bb6dc6","sha256":"1e44c1bf1cbf33e7f29aaf83958a97e71cbb0ecb53ef70562a2f4ce55aa2029b","sha512":"14390d4a765f82a006094b75932f9a15b92957c9c93d39cf769a8d5d32010fc8db784931481152d61a3909a219b27dd117bbb8f7fc5ac3d0ac952e552b8b7923","ssdeep":"","tlshash":"c7310031e570b0047562c543b9408e9b39284213daf3e2abb5686bb4cdb25e1ab91308","first_seen":"2025-05-26T08:52:10.508581Z","last_seen":"2026-04-09T10:04:25.344001Z","times_seen":98,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /node_modules/@activecampaign/camp-core-retrofit/dist/bundle.js HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"2455084735\"\r\nlast-modified: Fri, 19 Dec 2025 23:58:50 GMT\r\nx-envoy-upstream-service-time: 2\r\ncf-cache-status: EXPIRED\r\nexpires: Mon, 22 Dec 2025 20:48:33 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b82ad1656b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186349,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a2c8c80a4d473e45905e59318545d08f","sha1":"06ec786ac34f107ffdd52b5b2091f6bd4bbbf695","sha256":"9521170bba73e8510e258dc77ad76297429cec8645411b0db51e7fa6a546db07","sha512":"a7d7d815f545d4fc198e7b7d8894fea2601d5da961eba7bc84d57f621c9c6594f152c99314dd42c52efee4ab27ae838b0ee2eccaa67d3bca7583380c0268188c","ssdeep":"1536:R6S+p++PDBkSPT/Qy2g0BycStb/zC5YkEtASBn/T5eYj/MTzU8uoHoqJd4R3YjFq:4PlPH2TKbbCZEaIIbwYFeUaZZRBpR+gf","tlshash":"ee042bd8b2a1f5b207d361b9653f110bf3353468a40881a4f62dd8e63bb898b4177f79","first_seen":"2023-03-11T10:04:07Z","last_seen":"2026-03-27T21:21:53.026247Z","times_seen":140,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=IBM+Plex+Sans:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=IBM+Plex+Sans:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://directpersonalfinance.activehosted.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Dec 2025 16:48:34 GMT\r\ndate: Mon, 22 Dec 2025 16:48:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14442,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed263f600e0446a82e3b697b588af4d2","sha1":"0d09bd287b6f556b80cbef2e0d07f4f9397047b8","sha256":"b8e9363468979a90abaa273c5d996ecae42541e4b2b3d22d3062d1088f610113","sha512":"d241265f3520547c4d36cf3564de41fb25e43070b1c54482f1d0fad47c4891ccc663d3931705c5991a1b474d609366fa513e6afe70996e4087f4c810faf8c6f6","ssdeep":"192:1Hlhl3wcL/rH6Wl3T/LcaHL/l3CWLhFHocl3NhLW8Hhll3EoLLfHW6l3HLLoQ:VFrDdR/rNVjTp","tlshash":"3052ed64802a649077031dd633df3e32894ea4807485d67e6ffd2d789cabe36627170c","first_seen":"2025-09-23T02:01:46.750282Z","last_seen":"2026-04-12T03:34:16.807198Z","times_seen":79,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":113,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:35.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b211b8de85156c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-12T13:55:20.466972Z","times_seen":331804,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/functions.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/functions.js HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"6945e54f-b9e1\"\r\nlast-modified: Fri, 19 Dec 2025 23:52:47 GMT\r\nx-envoy-decorator-operation: ac-hosted-current-web.activecampaign-hosted.svc.cluster.local:80/*\r\nx-envoy-upstream-service-time: 3\r\ncf-cache-status: HIT\r\nage: 3289\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b827ce756b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47585,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (307)","md5":"b18e0ae8a5e893ac4a0a627aab0b1e77","sha1":"5f9a5af4087a771960e2c0d48d9e8a1bed836a75","sha256":"a8ef97c3c11d3d216259accfb864bd5360ef771aef244922331993eba0c35aa8","sha512":"1cd2156699d2dde75706fe1771ca0e3072ed9d9ff3011262b3a256457cf62a04414a99947cb9ec672fd16cf5e979e586235d0e51631e487a8853f09f66d85209","ssdeep":"768:yqgEZ7XHBGK+17zUE6MpSltTfsKimVpUigjKhKoWzaGTPF37SOQ9Dxcftm5WhWfP:tgEZ7xGK+17R6MpSltYkVpU+7uaGTdYP","tlshash":"3523a742e78b481728763638587e5589973c86b299c48c4abc9c53f81be0dbc5337f6e","first_seen":"2024-08-01T17:31:52Z","last_seen":"2026-04-10T15:24:07.550778Z","times_seen":579,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/skin.min.css?v=2","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/skin.min.css?v=2 HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"1993504865\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 3\r\ncf-cache-status: HIT\r\nage: 5685\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828ced56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461839,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d89808d32e75ff14779192b2b30c4209","sha1":"7803d9c03cefe4ba3e1fc233a089aaac59cb41c1","sha256":"c6028174019e9c744a8b99c1ca84f01ce746b0e6deefb42f4f62bb75dca5547d","sha512":"a13ec6da116f467dcc3b2b691e0c9e6b2a5cdf6c98ee92ef7f47163add2921403dfc666815510d34bb81664efb252cd24e31d1b4198845196ca337fca1af7115","ssdeep":"6144:h7mM4oyD2NTKMwQvshfZb1c6fEpWjXnSFCZ0zW:pcRbApWj3YW0zW","tlshash":"8ca40b32f1d2202d70a7c26af89267fd3938c423da524fbee564b374c3d61e6153265a","first_seen":"2025-09-28T04:45:03.347407Z","last_seen":"2026-01-26T11:30:52.68338Z","times_seen":49,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o185886.ingest.sentry.io/api/5321290/envelope/?sentry_version=7\u0026sentry_key=e69efc0111d24ee3b79752765776ca0a\u0026sentry_client=sentry.javascript.react%2F10.28.0","fqdn":"o185886.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.120.195.249","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:36.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/5321290/envelope/?sentry_version=7\u0026sentry_key=e69efc0111d24ee3b79752765776ca0a\u0026sentry_client=sentry.javascript.react%2F10.28.0 HTTP/1.1\r\nHost: o185886.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 449\r\nOrigin: https://solve-widget.forethought.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":449,"data":"{\"sent_at\":\"2025-12-22T16:48:36.211Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.28.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"d36fe12a18de4cc6a7344ccd837ca77b\",\"init\":true,\"started\":\"2025-12-22T16:48:36.210Z\",\"timestamp\":\"2025-12-22T16:48:36.210Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"production_v1.7.969_1_d45c6d7\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-12T13:58:40.892721Z","times_seen":571760,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":84,"dns":13,"connect":13,"send":0,"wait":41,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.acemlnd.com/","fqdn":"directpersonalfinance.acemlnd.com","domain":"acemlnd.com","tld":"com"},"ip":{"addr":"54.235.205.181","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T16:48:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"acemlna.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 12 Nov 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:5D:2F:B4:CD:27:CB:15:2F:B1:97:10:CD:EC:49:98:1B:81:22:C8","sha256":"2B:F1:78:81:C9:E6:04:9D:5D:B1:43:33:E4:73:9E:E6:05:99:A8:D3:64:30:4D:4F:8B:08:C7:73:1B:C1:C6:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: directpersonalfinance.acemlnd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=2628000\r\nlocation: https://directpersonalfinance.activehosted.com/\r\ndate: Mon, 22 Dec 2025 16:48:32 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 0\r\nserver: istio-envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":8120,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":724,"timings":{"blocked":312,"dns":10,"connect":98,"send":0,"wait":99,"receive":1,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"directpersonalfinance.acemlnd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/jsc/ac.js","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/jsc/ac.js HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"6945e634-dcf5\"\r\nlast-modified: Fri, 19 Dec 2025 23:56:36 GMT\r\nx-envoy-decorator-operation: ac-hosted-current-web.activecampaign-hosted.svc.cluster.local:80/*\r\nx-envoy-upstream-service-time: 1\r\nage: 1801\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b827ce556b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2016)","md5":"285f8d148043d68882cc2e4891b9df46","sha1":"8ed7b70ff12b9dc0afb1692f52e8578a1fd88704","sha256":"fd1fc9c8f2532361951446c544831b536a864b204b48b61b3b2f225d387bfa91","sha512":"d176a53084e651423a53fc870c1b86b782e4a9ae45e6b6dd1c45a6b45054cde83546a730021b250ac86ae48152f2114cb616d032bb349f59297934a85896036d","ssdeep":"1536:KYDugRTFbV6+zEVnJFkF3HHiWK3ScuAObxbw:KIJRTzxHAULk","tlshash":"21432accb3663067d6a356a8047f0606b03699abfd081de9d14999f43db1e8db073f68","first_seen":"2025-12-22T16:38:57.50501Z","last_seen":"2025-12-22T18:24:21.69369Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/animations.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/animations.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"3521144363\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828cee56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":53691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (53691), with no line terminators","md5":"8280286f2b9909c0efc7835087414a70","sha1":"cec9dc16deb3d864691b4ffb9da4f875db1a36a5","sha256":"3ece198ba8320c0feb832d49878b01cb35a0a06443aa42142cfdbbfc4e10af68","sha512":"6931de56f8774651341fa6426d015821b48e72b3bba4e8c0c2c29247f50898c214eabded1318cfd7e205d7e67b08aabdb6f66915fc78f4bc9d45f9955ee96a4d","ssdeep":"768:4kZcIOIujYIuIPPWw816AfkuDL32ye5trKeJ0OTbsyst:4kZuPWw816AfkuDL32ye5trKeJ0OTo","tlshash":"b93308ae5891225990274f66c7cc5e68873dc76364621cde33826c4b8b47fee33ca617","first_seen":"2025-03-03T13:00:18.148609Z","last_seen":"2026-04-12T03:34:16.80024Z","times_seen":108,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/skin2.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/skin2.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"3872602158\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 3\r\ncf-cache-status: HIT\r\nage: 5685\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828cf356b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":479950,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9d6de5799249f4ba65cfb74404b54468","sha1":"9fa30f2a66a865417716bf3564620570b4fc77a7","sha256":"f856b847024f5c58b9b822b1de3d9c4cc86e611890da4093c4a5043516fb8c1a","sha512":"42fd311e774673848840999861af6ed450f38a4404a56e0428a7597eb1e7d71094aca7d1529c8056f31a78788c33f8d0e0f8458c9daa430f3275d7ff0dc3ac56","ssdeep":"12288:dfhGmkQr+ZAYwd7kTjZl/xTT6OjUyFSK30/:dfhGar+ZAYwFyg","tlshash":"d2a4e831e2aa211e6067c23bf8967aeb3f34d013da134e7dea75b728c3d54d91136285","first_seen":"2025-08-29T21:23:27.867432Z","last_seen":"2026-01-26T11:30:52.686937Z","times_seen":59,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/ac_global/fontello/css/ac-icons.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/ac_global/fontello/css/ac-icons.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"3986237264\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 10\r\ncf-cache-status: HIT\r\nage: 2807\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828d0156b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9284,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9284), with no line terminators","md5":"cefd465957aa605de2fb5c4ee28c401b","sha1":"45854945800bd166acbd4fc4b6f9d36778c39eda","sha256":"89222bbcdb55e989f2d455bcb5a9aa6fef38a15345d6a21e4472666e79659313","sha512":"b5b20d53fd6c59202e34ec2326379884ab0a39cfa980e001366b7cfdd6bbf90d616d577ed773f4dec0352cfdf503138afe80d90a5e25ee0d2d5d9bf268a0f2d2","ssdeep":"192:4sTsIaHjdTQ55M61OpY5p9fcbtEeiIP00BDRijXxd48D/7OvPsULn3utKkOJ8DWg:4sTsxHjdTVQ2emdKRfmeD6wI5MI/JVBC","tlshash":"c5121ce4ec2824c83732c487cb64a74924d6f129dbd15c1af35a961c2bf27112a85ffc","first_seen":"2025-05-08T06:07:30.026529Z","last_seen":"2026-04-12T03:34:16.80661Z","times_seen":135,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/css/css_camp.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/css/css_camp.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"356920187\"\r\nlast-modified: Fri, 19 Dec 2025 23:57:57 GMT\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: HIT\r\nage: 5685\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b829d1356b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120629,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"51221f267c40f39e73515a1512112b21","sha1":"13ae5ac7cd00d5a3b37f519bf2a085907c09ee4c","sha256":"a66f7102ece54f430811e71424308f6ac6812a232aa967fc6996db6e5bb4b971","sha512":"9967fa3666aafc1e4b822480ea5da36ef16dab588ddebc429cc9e2242f4cfc5a3a2d777e5614c7ff4b286211a6da51ecfd0c7c4b425f87b95072b7aad23e43d9","ssdeep":"1536:NSK9VvhKv0F4U3SuKkqnUaP8RX+W5bq7kkn9MONPG8f5++cde6HZk7Ld:NHKkqoZk7x","tlshash":"aac3666f0f61314db56f8612c2a1fbd86610f80dd29277ebfb036d16cfc669245a298c","first_seen":"2025-08-29T21:23:27.850135Z","last_seen":"2026-04-12T03:34:16.804818Z","times_seen":85,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform-cdn.app-us1.com/ac-frontend/maestro/assets/img/login/ai_splash_1_en.png","fqdn":"platform-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app-us1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 03 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:BF:1A:91:C5:D0:67:79:06:B3:80:52:80:51:9A:6C:4E:C8:63:D3","sha256":"0D:DF:17:0B:18:F2:16:79:39:2F:34:12:E6:31:3E:36:54:CE:63:DE:93:65:76:DF:F4:F9:34:BD:D5:ED:53:CC"}}},"request":{"raw":"GET /ac-frontend/maestro/assets/img/login/ai_splash_1_en.png HTTP/1.1\r\nHost: platform-cdn.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 858214\r\ndate: Mon, 22 Dec 2025 16:12:06 GMT\r\nlast-modified: Thu, 18 Dec 2025 18:10:17 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"34289a4304602ebb1d1ba242957528f1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: oEyImeb1ugoLSv-MAbjC-_AL4xYol1uwQc_lr40ENUYEP-wySF-PeA==\r\nage: 2188\r\nservice-worker-allowed: /app/whatsapp/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":858214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 1040, 8-bit/color RGBA, non-interlaced","md5":"34289a4304602ebb1d1ba242957528f1","sha1":"6c590e553d99cd6ef0851d24822ec8aa3c3721d1","sha256":"9f88fa37fe4cb7d29fc38d88b58b3b7a9d2fe362c536e6ff9b40ca8ce8aa7bb9","sha512":"ace17cd6f40fa7349dcaab6ef4b18c11e9319760ac6d357fe119f31a3889ef212ebb90c7b0d6a5122624802aebbf2ff102f0d22da3fddf558f3abaef31ba989e","ssdeep":"24576:4CB7bAhbYQWdt3HIElh/V6FlZVteA1Dq2FdciiQiJF:/OOtoEB6VTqiciEJF","tlshash":"360523f05613e0ca7a865713938fd63c1f971fe448215a64b8a8c3b839bf684ded6c64","first_seen":"2025-09-30T10:48:07.847698Z","last_seen":"2026-04-12T03:34:16.810863Z","times_seen":56,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-widget.forethought.ai/static/css/async/438.c963a723.css","fqdn":"solve-widget.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"172.66.47.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:35.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"solve-widget.forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:18:17 GMT","end":"Fri, 06 Mar 2026 17:18:06 GMT"},"fingerprint":{"sha1":"3E:5B:2A:15:97:86:09:BB:7C:96:59:A9:15:45:65:94:C8:57:DA:7B","sha256":"CF:85:44:53:F0:23:CF:35:C4:4B:B4:4A:E9:75:2D:4F:18:6A:FF:A2:C4:BC:F1:F0:8C:70:CD:0F:6E:50:EF:EA"}}},"request":{"raw":"GET /static/css/async/438.c963a723.css HTTP/1.1\r\nHost: solve-widget.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/?v=2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QIPSsF5aorsAq38VcvIU1hF86lh%2F43K6Pt6IqB76WqixMfRzeqV3kgiyiqwJc9e7z3HWMkMIdtbpSSFd9dS8TPpo2vSOTODio%2F1k5oW9bMHn965ws%2BuNkdWNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cca2c26eea46aad56862c82131e9fcfc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b211b8e9b723181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (683)","md5":"0d30c461e20f83b53a5bd268d13d58b7","sha1":"d17bc0bcc02a29356613e4ad812db2281e80e5c7","sha256":"1e8e2d5ddc07da12486f4594c0591604bc291fa969d8f2704aee0691f862d2d5","sha512":"3797d9647de9c8bc05f93f25743d85e40e0d1a3eca8c2f6558a38d6e2b4d8581ec81942c00689678e703765d26ffc317e436e5f5b54359c2ff77157e38493cad","ssdeep":"","tlshash":"a5014c501e1fac99a9624c4b36cf12215c51f0b7365c0557ca1d4d898cf3adf3362f25","first_seen":"2025-12-11T15:28:11.720865Z","last_seen":"2026-02-11T20:59:03.965206Z","times_seen":51,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/mainjs.php?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/mainjs.php?v=9898dcdc29ac46db HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-envoy-upstream-service-time: 71\r\nx-request-id: 448907c6-218c-4be8-ab40-f4e845150f27\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b829d1556b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8990,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5685), with CRLF line terminators","md5":"567ce125a09136c78bb2465f0917517b","sha1":"504c46af54e6de7ce3695da0ce34b7aefecfcd75","sha256":"342515cd51f04e5c6d2795ca6aac1aa272bba94f3df358bfd5c5e4971b46c143","sha512":"e4386e60b3d849fc0e3581ef717015b766f1f265298552f0a66060537f71df8bed19436ac3408cc06a91126b271c54b7b60a1a2b0d8afd2dba36d820a5abd5a8","ssdeep":"192:bBlUuDWQN3NdRqUD7RaHHILWD/qFifAWHoApHILWV2Hg:dlUu6IXDNaHHfD/HfV2Hg","tlshash":"4d02fe6a49144e163017f1bea687afc2c52fcf07571c6a2b9b984f0d1f5f92dd6ab200","first_seen":"2025-12-22T16:49:15.615805Z","last_seen":"2025-12-22T16:49:15.615805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rxaij56vjege.cloudfront.net/media/favicon.ico","fqdn":"d3rxaij56vjege.cloudfront.net","domain":"d3rxaij56vjege.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /media/favicon.ico HTTP/1.1\r\nHost: d3rxaij56vjege.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 730\r\nlast-modified: Wed, 23 Feb 2022 16:14:06 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 22 Dec 2025 07:52:26 GMT\r\netag: \"2ed86f7b79c7afa8fc13da5d9180c70a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2Uoh5fxTw5bMOe0IhIEvcSUkgpKmhj-SoTYzY-YAWun3C6uV5d9quA==\r\nage: 32171\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2ed86f7b79c7afa8fc13da5d9180c70a","sha1":"e234c01f9b5f8510e2df6d7247e655e35e8e58f9","sha256":"424bc306a7592f083083582b9240e0ebcad2338861b8d6d218a4e51f1349b733","sha512":"9fe43e2cd6e5aa5cfe7b789f70a787359a3807ba4a4c372c95b19c7748bf955334850fd97ed9cdc87da67aa087bcdeb05b545d16bdb46b89070d0821eee8ae8b","ssdeep":"","tlshash":"270199d3db17e885a83da17ff2228482da0cd11bce274444551216793d43ff5e51e741","first_seen":"2023-05-22T12:57:02Z","last_seen":"2026-04-12T03:34:16.790082Z","times_seen":578,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/f1a940cb-f0a8-44bd-8da5-d9aec8a9b799","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /compose/f1a940cb-f0a8-44bd-8da5-d9aec8a9b799 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"3a19d8f687ad2d944c9b9cd03bc7cf70\"\r\nx-request-id: 9ac84bab7bfe889a-SEA\r\nx-runtime: 0.012405\r\nx-envoy-upstream-service-time: 15\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fzs6JGqgIDHe4WX0Mm2OcSkrfNfrKYo6jqRL%2B%2Fiq1OIi63K3Pm3HjpaG%2FqfZUThLyij4RgZTKhmBIlIycVPwR0ws713tszDmsuCwL82l4XmwDviAaDJGQNKyXkfYwhB%2Bntk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9b211b8c2ea9b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0edb1ab6e0ea0f4ed1bbddb910910642","sha1":"46f447f26641adfec2c7156975b96ce99dfaafb0","sha256":"3a19d8f687ad2d944c9b9cd03bc7cf70f6218de700af6212f3ee86fb2f5174ba","sha512":"bfb58f82ac4bf1445fea5b78621a208036d37e662dbcc06383a60a0fcc465d98239aa5891fdb99ed1fae6e405c74291d94adc9133ed0bfbe38b79b7101ed389d","ssdeep":"","tlshash":"4731227e8b4a34bac6468361e029798317788eb74288a46cb9ccc80c51eb5e71146e5b","first_seen":"2025-12-14T03:59:43.380267Z","last_seen":"2026-01-04T03:02:47.394038Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":243,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-f2a00db.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:35.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-f2a00db.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 9Q9MWkJlPSCSgVm0qnTwXF6BLjHcWIbk4p8OcLMomaTW3M9fqsMir4BFHyOiMUwZPY8Y2m8PcNM=\r\nx-amz-request-id: HJ8JTY7VN4CBYYDZ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 11 Dec 2025 14:27:10 GMT\r\netag: W/\"a2f4526cd5134c814785aab83553a998\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 11 Dec 2026 14:27:09 GMT\r\nx-amz-version-id: hEt_B0nRsBWcmNCjTBJrzzJEgNLAR3wD\r\nage: 958701\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P07M4817iWTKI0anH6JB4AfUvWDF5O1jWATqqEk8biu9jDmSW%2FupzsHuvV4zAJ7QOyZ9HxHLi6GVBnAuhKyMs29FPPxwZ9JODzQ0Z00fxhoCvfXDvkLV7qZK8c69qF9WcaMpwjA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9b211b8fcf98c272-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26468,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26452), with no line terminators","md5":"a2f4526cd5134c814785aab83553a998","sha1":"e553d3482580e035ec85976443dc9e997800655e","sha256":"8f02be6ef66bf5779ed081ecfd7abca00adb6bed47857873af21920849b2b15e","sha512":"029dc89c0fa8b308bba18d2d9397c9d2b3c8ad6ac89c77e82097455dce98ef6e6b6e75d6495682586eaa635d91a29fe0145e3116af715e6aef16f0ff0e1f9f04","ssdeep":"384:IAxByPkahyY/B0TcvYJRcCKcP6A4o120F/+ManZPo0K5u:IAZsykB0TcvYJRt6KdOo0K5u","tlshash":"e2c26d3b449ca51f3f76a6817c45b14eb7a79600bd9c4379f4869c0e93acd1022fbb49","first_seen":"2025-11-12T14:16:45.405713Z","last_seen":"2026-02-12T15:09:53.277306Z","times_seen":2465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solve-api.forethought.ai/workflow/widget-config","fqdn":"solve-api.forethought.ai","domain":"forethought.ai","tld":"ai"},"ip":{"addr":"104.17.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:36.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forethought.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:56:35 GMT","end":"Wed, 11 Feb 2026 06:56:26 GMT"},"fingerprint":{"sha1":"A3:63:2C:8A:B3:9F:AE:4B:CF:69:57:3F:4D:83:33:65:49:82:3F:57","sha256":"C5:61:D5:F7:A1:A6:BF:63:0A:BA:0B:6B:69:B9:A1:67:55:9F:56:11:CE:A2:82:D6:AD:D0:E0:24:CC:54:C8:20"}}},"request":{"raw":"OPTIONS /workflow/widget-config HTTP/1.1\r\nHost: solve-api.forethought.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,is-config-preview,is-draft,is-preview,solve-origin\r\nReferer: https://solve-widget.forethought.ai/\r\nOrigin: https://solve-widget.forethought.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\ncf-ray: 9b211b95e81a5a0f-OSL\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://solve-widget.forethought.ai\r\naccess-control-allow-headers: authorization,content-type,is-config-preview,is-draft,is-preview,solve-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-12T14:02:49.693236Z","times_seen":265209,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":41,"dns":1,"connect":1,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T16:48:32.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 22 Dec 2025 16:48:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://directpersonalfinance.activehosted.com/admin/\r\ncf-ray: 9b211b7c880756b4-OSL\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-security-policy: object-src 'none';upgrade-insecure-requests;report-uri /csp/\r\ncontent-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'nonce-460e98e7878543ea3c835c43c58bb567' 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-attr 'unsafe-inline';script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-attr 'unsafe-inline';style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npermissions-policy: camera=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(self), payment=(), usb=()\r\npragma: no-cache\r\nreferrer-policy: same-origin\r\nset-cookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; path=/; secure; HttpOnly; SameSite=Lax\n__cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; path=/; expires=Mon, 22-Dec-25 17:18:32 GMT; domain=.activehosted.com; HttpOnly; Secure; SameSite=None\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 73\r\nx-request-id: 6b98ccf5-0fb8-43a9-9254-8af26f63388b\r\nx-robots-tag: noindex\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8120,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":31,"dns":5,"connect":4,"send":0,"wait":251,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.13.3/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.13.3/jquery-ui.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://directpersonalfinance.activehosted.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 57033\r\ncf-ray: 9b211b82baf58deb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"662bd834-dec9\"\r\nlast-modified: Fri, 26 Apr 2024 16:37:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 233894\r\nexpires: Sat, 12 Dec 2026 16:48:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wMp%2F02jUoheNRJ38toIhb1Fp4kQm53hrB46CnnIjiwzzHx5kbGKmMr4YD8GANzkWCv6zquBjnTlM7%2BTQGmZ4l5IOEM3reHatgn7lLxm4Y7BGp%2FKqIv8nnb2lTd1jnaweMBDdDyqP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254963,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64398)","md5":"3305041b1dffc2ada01dd1f54417f300","sha1":"aa006fccf39c5fe50d87f0596f6c5c437588dae2","sha256":"b30d2234d5e63896d085816e0bd385da43a50f929029ed72e657c19f80bd4a38","sha512":"5b0d72f4eb90da47a18155920ffde78607eb6f8db83b7f34d9060ffc0e603d7a0ce3ead18e22ab8c7746c502ab306432926b09ffcea819d1eccdf715814af884","ssdeep":"3072:+luPSaSvN5kaiDLCutlfU89lKazR42uz1eWaGMFW5dwgsY64OA1n:92YlPOgEMAFXTOk","tlshash":"0944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2024-06-16T16:54:07Z","last_seen":"2026-04-12T13:48:34.295835Z","times_seen":1739,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":32,"dns":5,"connect":2,"send":0,"wait":9,"receive":3,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/admin/js/jq/csrf_protection.js?v=9898dcdc29ac46db","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /admin/js/jq/csrf_protection.js?v=9898dcdc29ac46db HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"859917829\"\r\nlast-modified: Fri, 19 Dec 2025 23:57:59 GMT\r\nx-envoy-upstream-service-time: 3\r\nage: 6448\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b827ce256b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a500cf29d32cdfd51b64fb954a27b326","sha1":"e44ed2fa6b2e5e1a361b10dc47395149b4f94917","sha256":"683fee361e0d102813dc94deb9f32ad142c1c1c85a2dd0b78e8eca13b6dc7938","sha512":"b9f3b9cce370cf4d9504bf824140e4876f34bc957cf18fc325d071cb3357a08240061a087317ee438e08a43f64d1c636e64574a372e78af8231db2514eb8b42d","ssdeep":"96:slSEbGRexaH+H4HXMHWzXSJDQnAGW1YX2cjqwdZEWmRqwHqwLTcboa4uvp8Sl+BP:HiGXFcWzX/nAn1oVjPdZEW8PHPLgp8SU","tlshash":"b49196d6b29e752f45b124606da793b577b8f33034128445d498c1fd66c252ed327f42","first_seen":"2025-04-14T12:18:42.116628Z","last_seen":"2026-04-12T03:34:16.806063Z","times_seen":538,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directpersonalfinance.activehosted.com/dist/admin/css/style.min.css","fqdn":"directpersonalfinance.activehosted.com","domain":"activehosted.com","tld":"com"},"ip":{"addr":"104.17.205.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:33.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"activehosted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 01:59:41 GMT","end":"Sat, 21 Feb 2026 02:59:38 GMT"},"fingerprint":{"sha1":"49:D4:96:FD:9B:9F:C4:0A:68:18:E4:C1:47:CC:CD:EC:89:8A:80:E4","sha256":"35:C9:55:E9:8B:E8:F4:D1:A4:FD:F9:5A:41:42:87:9B:17:F0:28:82:8A:2D:62:D8:16:EE:75:92:82:5B:F9:1D"}}},"request":{"raw":"GET /dist/admin/css/style.min.css HTTP/1.1\r\nHost: directpersonalfinance.activehosted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://directpersonalfinance.activehosted.com/admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=995682bfbd6f6f1512b9d2d7ec3db400; __cf_bm=idBbYpzz6nfOJfh1B.39PTRoKVTwhq3EYIoHGVkL3GI-1766422112-1.0.1.1-CDyxnm.CnEVuZ44QGV6Y0e4CjEGJu_OrWVnonLGi7MJ3aF6VFMMi01Obo_Yj_TJvOoWipU3savC9TJjgDLL5TJ7xLjxrjgHPmMg5qOs9uds; XSRF-TOKEN=6tRSE1x3OvQcvoDQU5Nwfkr8eKXeLrdS5YbEWP-OcIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 16:48:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: W/\"1650742388\"\r\nlast-modified: Fri, 19 Dec 2025 23:59:08 GMT\r\nx-envoy-upstream-service-time: 5\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b211b828d0356b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":126934,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fae90b7371aa4952a75d983b134ff749","sha1":"e1e521619d37973f8c76312e4bffe8d890e32fc4","sha256":"4131d32856daea61a347fead1d44d9cea60c5786db8e07c12e04ece717efa3cc","sha512":"4688345173ea90b740da463a18157ff909caee2eb5c25462b5d8f2ee342d59b1cbcf3fb30ae6757d6b190c36bf79b3edf0a2304ecf45c5cd7395669ee9ddae8a","ssdeep":"3072:MVIgfj/JU237EqZK3jqsoDz94D+pStrF4WJF8IkEGGOrmNxxK6iaFnoF/gTI2Xvr:iYTL6izFoaV","tlshash":"41c3e8f1f2d3202cb137d126b58067ac7ab95012e5134ebdf591f264cbc28f64a67b28","first_seen":"2025-09-23T02:01:46.737926Z","last_seen":"2026-01-22T11:47:51.750921Z","times_seen":56,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3tnn7lar6ozas.cloudfront.net/08f2ced6-ee5d-45e3-a248-5828d7d63950.png","fqdn":"d3tnn7lar6ozas.cloudfront.net","domain":"d3tnn7lar6ozas.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.171","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://solve-widget.forethought.ai/?v=2#src=https%3A%2F%2Fsolve-widget.forethought.ai%2Fembed.js\u0026async=true\u0026id=forethought-widget-embed-script\u0026emit-tracking-events=true\u0026data-api-key=2310ff96-9b16-4a77-9601-827429c9507c\u0026data-ft-workflow-tag=login\u0026data-ft-originatingdomain=directpersonalfinance.activehosted.com\u0026data-ft-user-data=undefined\u0026data-ft-randomizer=2\u0026config-ft-ignore-persistence-parameters=async%7Cdata-ft-originatingDomain%7Cdata-ft-randomizer%7Cdata-ft-embed-script-language%7Cdata-ft-user-data%7Cdata-ft-current-page-url%7Cdata-ft-cookie\u0026data-ft-embed-script-language=en-US\u0026data-ft-current-page-url=https%3A%2F%2Fdirectpersonalfinance.activehosted.com%2Fadmin%2F\u0026data-ft-cookie=false\u0026initial-intent-id=8ee8d2e0-1abb-4c12-bcd1-6e1e1d499333","date":"2025-12-22T16:48:37.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /08f2ced6-ee5d-45e3-a248-5828d7d63950.png HTTP/1.1\r\nHost: d3tnn7lar6ozas.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://solve-widget.forethought.ai/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1711\r\nlast-modified: Tue, 12 Nov 2024 17:53:30 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .XKKSi3EMnpQH5xnblUkjVhpnyS5GZ2E\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 22 Dec 2025 16:07:51 GMT\r\netag: \"51bfbf8467bd589040750ae903bce99f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Px0mhJR-jUXw_e7tfaU3Tk1zt6ijQagn40AxzN4IWA8X4xhU7eL2rg==\r\nage: 2447\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced","md5":"51bfbf8467bd589040750ae903bce99f","sha1":"1f31bc103d6da5ee7137376c874159b754d9b71f","sha256":"0a7a4b0529de4c37201585d9f6e4720258895cea58b7408f42b19bd878ec8b1a","sha512":"aafc128b5f89f786f80c24c21e0a9da8f1db157406a2c0825b36b1aaa0412456a80ae824842ecd878905f0f73bf99f57a8057d3b972183bf1ab0bd4136fd4d8f","ssdeep":"","tlshash":"e2313adfa93837c8e2c8c2a5bfe03b1526c5608118912a0e8ebfc95fc933d280b15370","first_seen":"2024-12-06T17:13:31.716979Z","last_seen":"2025-12-22T16:49:15.620295Z","times_seen":128,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":20,"dns":6,"connect":1,"send":0,"wait":3,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pendo.io/agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js","fqdn":"cdn.pendo.io","domain":"pendo.io","tld":"io"},"ip":{"addr":"34.36.213.229","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://directpersonalfinance.activehosted.com/admin/","date":"2025-12-22T16:48:34.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pendo.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 23:07:57 GMT","end":"Wed, 18 Mar 2026 00:03:52 GMT"},"fingerprint":{"sha1":"2C:B2:2A:47:53:14:A0:AD:A2:48:10:DF:2D:77:18:CE:37:9C:98:6E","sha256":"C6:96:1B:81:EB:C1:70:FC:62:3F:ED:DC:E6:6C:CF:81:CD:D0:A2:7B:77:1D:C0:EE:15:A6:6C:3A:E6:2E:0A:8E"}}},"request":{"raw":"GET /agent/static/ed3d50f4-0e02-4aa9-544b-e7c43ee11673/pendo.js HTTP/1.1\r\nHost: cdn.pendo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxP8xNjhacxO9ZcshtcD1dP7CLdhqeWV1czdFkHhJFQndktttfvYqWOUuEZ8xeIb62Mt\r\nx-goog-generation: 1766412511516396\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 274618\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=ZWG0lw==, md5=3Rtf3EtW/+KD+/UpWMjGqg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 274618\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ndate: Mon, 22 Dec 2025 16:34:50 GMT\r\nage: 825\r\nlast-modified: Mon, 22 Dec 2025 14:08:31 GMT\r\netag: \"dd1b5fdc4b56ffe283fbf52958c8c6aa\"\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=450\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":830186,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65310)","md5":"b6f1afc51a109d25d5634f1c17dd363c","sha1":"3bf4eb68e9fc878542194bbc18fac49113ac545a","sha256":"d8e219fb1eb2e643043afcd174e02f9f7e8aab74ff44ee4753e1232e3dfb832c","sha512":"32e2588b9f3e551ac0c9461b7a1d61f9548cd715f52f1aab46fb24e8926aabb2bc83d336d05801ce84c1bc4638f6d7156c998dafaf61182ceffaf6d607f3ddbe","ssdeep":"24576:/Zj5GXeB+qScO/cYMjfhJ6yI8ZxEtvVnXoiHI:/Zj5NB+qScO/MhdI8ZxEtvVnXFI","tlshash":"f20539de31c6b03653a720ba806f100ab23b5d58681d4498f529d8ea3c7d98e5377fbd","first_seen":"2025-12-22T16:49:15.621088Z","last_seen":"2025-12-22T16:49:15.621088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":187,"dns":19,"connect":28,"send":0,"wait":27,"receive":93,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}