{"report_id":"1cb45cb6-d114-49e7-9a4a-ac7106dc26c8","version":0,"status":"done","tags":[],"date":"2026-09-29T02:03:35Z","url":{"schema":"http","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.8","port":0,"asn":27647,"as":"Weebly, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"title":"Xfinity","dom":{"size":36196,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5117)","md5":"f940944263901cd58ff90da911375df2","sha1":"d94a734b70e22794b52eb85d8c63d2bc26dde99d","sha256":"ece38bdcf14cb9781bc0bd867b9f5bba7fd297fbd32f23a32122066d3baf2774","sha512":"604d7a672149aa00c53b015b31e77a109ea5c216577c9d9c331181cad151c84d715fcd653491ad81f22487f59e7bd39d0fc6dade7ecf04908a16a274a27b9a13","ssdeep":"768:xCFIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SNb:xCFIRIOITIwIgIiKZgNDfIwIGI5IVJ7u","tlshash":"12f2e7d8fa3c6e354b3a41a6e2b75ecff97ed15adc5298c9f2dc402957e2e80025460c","dom_hash":"domhash18da3e0fd2a182bdbd2ca2b5e947b2ea","first_seen":"2026-09-29T02:04:00.471264Z","last_seen":"2026-09-29T02:04:00.471264Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.8","port":0,"asn":27647,"as":"Weebly, Inc.","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T02:03:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":12595,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-27T23:35:58.732281Z","alert_count":0,"request_count":1,"received_data":849191,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"signin-xfinlty.weebly.com","ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":15,"received_data":413427,"sent_data":11187,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Weebly","description":"Weebly is a website and ecommerce service.","website":"https://www.weebly.com","common_platform_enumeration":"","icon":"Weebly.svg","categories":["CMS"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn11.editmysite.com","ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-09-10","domain_rank":0,"first_seen":"2026-01-07T08:04:46.265814Z","last_seen":"2026-09-27T12:53:44.467451Z","alert_count":0,"request_count":8,"received_data":824351,"sent_data":4231,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn3.editmysite.com","ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-09-10","domain_rank":221935,"first_seen":"2019-02-20T02:08:33Z","last_seen":"2026-09-27T02:41:14.007123Z","alert_count":0,"request_count":1,"received_data":75815,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ec.editmysite.com","ip":{"addr":"44.238.174.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-09-10","domain_rank":164675,"first_seen":"2017-01-29T21:50:35Z","last_seen":"2026-09-24T17:23:01.157535Z","alert_count":0,"request_count":2,"received_data":795,"sent_data":1234,"comment":"","tags":null,"fingerprints":[{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn2.editmysite.com","ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-09-10","domain_rank":154739,"first_seen":"2012-10-02T18:27:39Z","last_seen":"2026-09-25T13:10:22.35832Z","alert_count":0,"request_count":10,"received_data":960844,"sent_data":5227,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-27T23:02:15.547295Z","alert_count":0,"request_count":1,"received_data":1654,"sent_data":487,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/templateArtifacts.js?1772018780","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae81ab7069097a055829fb9919258138","sha1":"7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a","sha256":"5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af","sha512":"923f0e92ed682f638eca768065630ad26195f03cfd54ba235531c50d587321e45d0e0000e811f943557ba08d9c8a21a3f4b430433370c28c456acd6b094c63de","ssdeep":"192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ","tlshash":"24e10043ddf3896207b187ecb1d23962a9e7fc4cbba16b1a019c3150161ceecd366d99","size":7160,"data":"","first_seen":"2023-03-07T01:06:21Z","last_seen":"2026-09-29T04:37:27.666301Z","times_seen":14202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a82ca0548d31ceb1b4be0d2b49ee6fb8","sha1":"cff4186bae802af7db1d5e81835dd984d9b8eb63","sha256":"c59d4617fdd5b6bdf54673f41d426dc2fbc4c1c74b381255614a06fb9aed91ed","sha512":"e9ab385374677dcb50710fa6de3185ecbe5396a18a70402d6f802ee5d75350268220bca61147348d0989de4b78eaff5c457a592e355030bf108e9204bbe243f4","ssdeep":"","tlshash":"96b092824dfc25120a80d9122a9b1c8e2d9680bee5c4cb8c6108437288c1722812a2a9","size":116,"data":"","first_seen":"2026-06-06T20:37:25.814617Z","last_seen":"2026-09-29T04:37:27.695344Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70b4465c6d42d1a09e256130cc5ea07d","sha1":"8a8535a3453db064603e6c89feaf8f832f87e7e3","sha256":"1515bb44ce135444902df3f8aedb76e68385121e9554005951011847f648b477","sha512":"b00d73f4365ff30cd84ade76a1754882f5d27a104552003e6797d09d4b8721df3e7233a4651aa6d74c6f1256db06af44387902fda4131b00aa2549e72b56959c","ssdeep":"","tlshash":"103137dc40762dfd1db54e6d3abea68da87b40477cd4ad4cfadc6f0220eace0101196a","size":1750,"data":"","first_seen":"2026-05-25T23:49:20.482736Z","last_seen":"2026-09-29T04:42:38.443841Z","times_seen":1612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1af91f49eaf520a6781d1532d042e246","sha1":"050b440a5972b08bdaedf533211b81a7d1dc8924","sha256":"7994084592a9d17ab403bb2ad23ac0f69c5f90885df387a6acee022060c9e486","sha512":"6ff5190cbef2f687807c6777e3d4ad22776659489cd7ce7c6c060dfb5c2d030eaf5354c014dd411575c687ac6c26cb011f9e4ff59a70a1a8ce9fbce7d01f9eb9","ssdeep":"","tlshash":"48a002394444864106805a0ab564697d3d128f3254c6b14a824110292320ab8b151dd5","size":59,"data":"","first_seen":"2026-09-29T02:04:00.503898Z","last_seen":"2026-09-29T02:04:00.503898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"200964a87ee52e83abc945a0d6ae8ee1","sha1":"76ebc4736cbf16923a5695b43a23be9a63b783d1","sha256":"635a66ee22e99f6b7a65319a62165460be59c77f21aced8476a4db6809660891","sha512":"3e0174ec33c3b0ac8f63b417cae8ff560000cb249bb190b43c5b3f175aa9433e80a4606a75c39327bd8abeeb209f1c2be20530f5672432839513ae488b2e9f19","ssdeep":"","tlshash":"23d017a9430f2930ada9420d647609e824fd5a42a9660e8afe6c4e3c0a1a8c4a6ec085","size":266,"data":"","first_seen":"2026-09-29T02:04:00.505322Z","last_seen":"2026-09-29T02:04:00.505322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"13385ea3f3e6184de3bfa80f08fe938b","sha1":"6f859a2fd4b7e15ed74990516d97a52e7b4eeb20","sha256":"5e87d85ec57af5d97b6c0d4c6e766afd2b53d077102827d19625a37d8cd11c2d","sha512":"8aa4900c04f87d6124679472944f9a780bd4e620d8d9626fb137e1981516dacdfea67207f8083f2111b691004364ca010d452ccc5389733be2fc7b1abf977917","ssdeep":"","tlshash":"f58004074004dfc30445d40df07455c1dc3453d503c041c1531710404d045135cf01cc","size":35,"data":"","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-29T04:42:38.447967Z","times_seen":17344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bca01edca83d94091a2bb38d7ef8183","sha1":"d05117e4ab3b3461be3855e95813a5c607e3ca95","sha256":"fcf1cbf5cfad6d605868f42d38a0a937f5e6eaa91b05dcfbbbc95e4c3e23e528","sha512":"559de3eefd0aaa8acf3141a8dfaea5dbfb92fc2493c2bd225591a9c637405445b11237ef369946865bc6c425de54d71d01f19e75f213c21bd60920600092557e","ssdeep":"","tlshash":"898000202e22880800008828a8ab802080a0800000202002c82830020b0a080a0a200a","size":32,"data":"","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-29T04:42:38.448634Z","times_seen":17391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0b4fc83130db698b8dc5950b3092ba5","sha1":"64be5b77646e79f897db955aa9ce211a4b20970f","sha256":"aacf8130e5b94c862a7c4d3d2aa37d4135a0937f3314e5029f291bc40b78c9ef","sha512":"83a0e4e495109f92d026f12a021c0cf583eee6ba8a6c0c6197e27ce2392fbb6541605b63a97c37fb3663acd58e07d2b4bd2ee063e25700f566c0c4c4e68826d7","ssdeep":"","tlshash":"907000320008200208a2000800888c80e3cb2a000030a02080a800cc0880c2002b0a08","size":21,"data":"","first_seen":"2025-12-03T15:39:01.288897Z","last_seen":"2026-09-29T04:37:44.474093Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a534b99828ce7c88a6c73484151d156","sha1":"3d8a5c3025328d39412035cd2d23d5152bd68029","sha256":"774ff8e3271b68416db4fe78ac72b900bdf14894064c02b3869a8ad719958aa0","sha512":"70c8cd7f32a1a88680efb35ad548bad4358a4c97faddd71dc3bc46027b494548ebe5a962ef232493ba01b6115d643689f165ddaba28f473c85c2b2d8ece61ece","ssdeep":"","tlshash":"9fa002b3143240711d90c4809832e298e9939108e88485c190045a1207a08f3c191950","size":60,"data":"","first_seen":"2025-12-03T15:39:01.293567Z","last_seen":"2026-09-29T04:42:38.450026Z","times_seen":1619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e97536bed2d52bd6b35189600bfd1a3","sha1":"76010df5e633bbc50d2e1fd8a807e74c6bf1f383","sha256":"8ec5b2ef6b9008bdc44af859cdc010ca009f29b215c3eb00353e0116813fa288","sha512":"ac052a2a2d0e62c228fb4a0bd2e275b80b5ed7724bdb8805417cda2573162247852976d1619dc182055740e25a93eef5a5475110bea291a00dcc120ba53ac115","ssdeep":"96:eFxMfDNpPeyhQwGwwayfyryWBKbyLyZyFnDmPyFcdN53D/NJheIWJeLeG96gy:eFxCTmyhQwGwwammzsb8WwnDuyFajhzI","tlshash":"d4c11980fb38641a5b6d66fad0bb4fc7efa70099146268caf0c4685c45b6a94139ef1c","size":6084,"data":"","first_seen":"2026-09-29T02:04:00.509354Z","last_seen":"2026-09-29T02:04:00.509354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9108cbabce9455780dfdccb0601ec1ac","sha1":"45f87820669f287b14c006ad6a9fed670cb18ba5","sha256":"6d6f7454b10d5a2b0177c316c1f1a39fadf801308eb6b1974ed5a5238cb11d3a","sha512":"c7821c24c1243989d480dd21b273190f66ed3c02e966df3f49fc9c0648f229a55b8635cacf71d3d0567d507a9c38fbbc913b9ee5910582f9ac4ac7d75cef1b08","ssdeep":"","tlshash":"f0d0c232ffbd42765b30e01d662b1dac5c731023d881c84a2b6888818843a505454f95","size":262,"data":"","first_seen":"2026-09-29T01:26:10.94747Z","last_seen":"2026-09-29T04:42:38.452028Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d116eb81c65e93db8da6f9372cbc261a","sha1":"3d5267099561884e01b4335cd68f5e2335e502ad","sha256":"0110f7e8c6fc39874681197b9f6077c06e9c3290bc0e34bb153cce9b3b7c2cb0","sha512":"67fed7c165dd303b18cecd9fdb49ae40cafdd260b7c38b67b388eaba25988901f9e57cfee5c29acb5fff4bdd6cd8f954fd8c4dba6c3f7a9bb4fbd57ff9ee4c1d","ssdeep":"","tlshash":"06c022293b000735e2ea69bfa13aa30c3eb68001180454a1100808000961ec422b6c8c","size":186,"data":"","first_seen":"2026-06-08T15:04:55.580228Z","last_seen":"2026-09-29T04:42:38.442393Z","times_seen":686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd43b29d96a6130c3f96d331336e06eb","sha1":"8fb16729862bf5dfdc492c41166d6c74a6698f06","sha256":"8722c16eb6ad86983f0187377c05d3dd5d8856995a631b29439aaa97187e9259","sha512":"4ba51ba5d02e5a7d6cc4dd445356dbfe434f8c47f626231d5125dd15a16bd0e628fab2aa8eaf723bd60c52f320718b06d328c6d1e2b4c1f5335a8325216070cf","ssdeep":"","tlshash":"bb0123ba2c5d3d3cc272921969f0c07cbb300824a591f916f848c6117690eb02c1b918","size":661,"data":"","first_seen":"2026-05-25T23:49:20.495742Z","last_seen":"2026-09-29T04:42:38.453278Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87ba2a1ec3deb260ae03782f3f23b295","sha1":"7d9692659e2cdb6ddcc3678485bb2e61e6ebd3ed","sha256":"161d6229853f4b7a982ea92bcaaffbcc443621a299dac296962ae717c3180f68","sha512":"3f86fb4315fce2b683969144a9bd81d58bf150a5f56b8a0b82e26da47b49b9cb0cb7f8024f1cfd18e2f0f1d7d405f261ad078a906c7eb619d380d2dd1da7ee74","ssdeep":"","tlshash":"d3315350778e75bc03fba16d659f714fd1bc6622a01cd83bca128a0c1094ef5b47ad8d","size":1826,"data":"","first_seen":"2026-09-29T02:04:00.513174Z","last_seen":"2026-09-29T02:04:00.513174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4525b2de8a4faeb10ed0b88958756a38","sha1":"711691aaea3acabb5394f9067cf2c41fb6bd3848","sha256":"92f3ff4c9e3420d5382c2340f6aa14c554cd16755a9ce2016a974796ce42730b","sha512":"f8469b68af89c47b9ac2c238c752aeee23d63ae7a0e59aa25a867cf6f7a9ce804df38b6f36a7c090c3d9636946daab7b617cd11886d8a9501086cd7b56342dca","ssdeep":"","tlshash":"1221a6f0e77d065ec83231246c3e53d8b91e62b2bc045cbffdd0b02824e4a2925aa30d","size":1154,"data":"","first_seen":"2026-05-25T23:49:20.498572Z","last_seen":"2026-09-29T04:42:38.455319Z","times_seen":1600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"80528b2040fabcd75d31258710862bc0","sha1":"86a3e6202c5d6e4cfbbd4e2fb8c2ed96506621ca","sha256":"8d48a3f349ec797a0743b4c743775557d57928bf5c0ca7e2aba435eed4c1d5c4","sha512":"0df85a4f6208acf02f5a25764b6950ced024ea91c764af53f9adab1a2d62827495f95ee92598d5caadf23d4b9786d40da7e0b22a41288640ee9b06c4e5a36a4c","ssdeep":"","tlshash":"f7a002447144e7a4e4f441746a466fa13b50841051616630fc90781021cad0b44d8983","size":59,"data":"","first_seen":"2026-05-25T23:49:20.500117Z","last_seen":"2026-09-29T04:42:38.455947Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd405374d69b9659cb08d1055e73bf62","sha1":"7e352de528fee1e95a8373e9b3062be877a9e7fe","sha256":"92390222a2e805c9c1f9a1639d695b0795fea17852377e88c761752d2bfd7e6a","sha512":"2cc9fe171ee6458e102b7fb175aaa695022ea880db237b6d4eb1b9469cfb9c23596bad79a185bd794887d1e98dd3c2887b42c316941df7d31ce96fae6836b2a8","ssdeep":"","tlshash":"a61134f8bb9c2466d2366e306cbb65c8f33ff9292515dd9f1d228608249c86943a4c51","size":954,"data":"","first_seen":"2026-05-25T23:49:20.501454Z","last_seen":"2026-09-29T04:42:38.456581Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.trend.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4beccebe0a060b2b2c43de5c2d4512ef","sha1":"250a779dd017877b9f360b264cf072d9e87974ff","sha256":"446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738","sha512":"09cc7f6ac18777399dcfbc22ea9069779c0d8193a269f672b62d738b79b6ef72ae4a30bd85d111d0e03e9fba29387b9a91ab6d925f0324d764a27c6416fc5288","ssdeep":"","tlshash":"1c71f189ff4625501953971417ef3819763dd0233f24e968f74e635a2f0681d029bfea","size":3775,"data":"","first_seen":"2023-03-07T01:31:59Z","last_seen":"2026-09-29T04:37:27.68888Z","times_seen":5379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/wsnbn/snowday262.js","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5ba6afadfc28f7c14fa95adc1e1010","sha1":"72ad567dfe461f8ed5b4e1728705a212fea5d3a1","sha256":"d2cc54b76277ed03f2100a982d1c04f97f8c6974edaf6fc5a8d051c785d69b9b","sha512":"acbc64c32a5b854c235454fbbb0b49f069070ec9ce82cc1d60bf10e6b19e1296e40ab23cafeb567ee132ca0cc937789636990f73c0135fbe53448065a96801f9","ssdeep":"768:wdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzHW:CFSZYdMS1xGNopX5LP16FuvqT7bmVV","tlshash":"067319d83391707a87e73131287f960bb13aa862989cd8a4d761c1e07d34e4d527bf6e","size":75028,"data":"","first_seen":"2025-09-04T19:42:24.429082Z","last_seen":"2026-09-29T04:42:38.439818Z","times_seen":11479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?_=1790647379832","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6146496c82343387789b757ab3f4464b","sha1":"bd5d774f807b235155143f4771076347f4be72b7","sha256":"f3fb11dc8824e67fb9efc3b591f2a747673aad64573ac0249189c4f5ad590c85","sha512":"ffb4a88cc865f15009d4cb99af62f00171dbf53647c5093e59129da1830aaf27917fa6fc4ef499408270480ba5598abedaaf59e7bf8f3c405ad059e0ba5d0fac","ssdeep":"","tlshash":"801121b31918a0340b3209e1e1ffcb75e452701cf16885e8d815da842e6accbce05585","size":976,"data":"","first_seen":"2026-09-22T05:55:29.014597Z","last_seen":"2026-09-29T07:47:15.236749Z","times_seen":759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/plugins.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b8d85f1ea01d2c3e8b962eac8d76a5c","sha1":"936987a7e08daa4a916c77d86937edee42d657da","sha256":"b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5","sha512":"f64d0e9fc7ed02f4c7b3cf7fd680df3a6f8f4cefadeea63553d0f0a4bb5472abf5ee754c0e056cd91272f0108910347ba6f3cf23c825fd89260cf0545dd0702a","ssdeep":"1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75","tlshash":"a463824a3aef2250456b70753faf4180b16a841b258edb447d2d5be02fd963883f9fe4","size":67465,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-09-29T04:37:27.668027Z","times_seen":7543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1771974631\u0026","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c766c83e34d38cf9e468676c5c6a8bd7","sha1":"5011ef9c7829e19ae656437569dcd7d27e55a7bd","sha256":"cdaab7fba05a1f550ba14fa74ca37e9395b406462e6b1d60fbc93211cd70d5c2","sha512":"50912a115e43182135ffc7759ff9140c0b8e4287e07ccdddd0e87e52df793f5036c2f7245941c6d03579c2469f0e2d1ae85ff73943abb11c71eeb9e977d29d92","ssdeep":"3072:9XVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNupeNw:+EKvU8U","tlshash":"9704b64be00ccb12decb7e39fc7a5faf7969410016002b759df4c93d11916b8725baaa","size":189349,"data":"","first_seen":"2026-08-30T02:58:11.237306Z","last_seen":"2026-09-29T04:42:38.426161Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildtime=1771974631","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72520995745ae493ce8d25624cd58fca","sha1":"6b4cc62dedf97c00207a187b6978b78b47958387","sha256":"ae8602530cf5e207d150cc81f3b5d9e09b4430aa3cca9820c95f570565198e63","sha512":"0f5e6c3051dd55176778b557e8b8b1985d6a05b329fc8669c2556553483f6ffcb4031a5745da1a093a9e6f0596dd279b1a3732c2bc05f7a9727ac3675e9e0159","ssdeep":"6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJ2t5Tz:Tj/ybiQD5/C2D","tlshash":"12b4e7cd32d6b2aa87fbb274406f610bb2799d61684ec504f264f4d97cb94189237e3c","size":534298,"data":"","first_seen":"2025-02-26T17:03:12.946787Z","last_seen":"2026-09-29T04:42:38.436256Z","times_seen":10867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c1db72e213146c75189f4b6a82fc7f3c","sha1":"3867c5fecc075a70965a96c23c59e7351b6da0d6","sha256":"4d286bfbd53979af2cd45d0286d0400b8ae4da5f06b116dcc30db452b71481c1","sha512":"1fe0dc07ea036721e11e5e241f5d04a4a8a767e66250c82b45709d4e2b47e6bed99d227d54c6115a775560c9b9edfac663ab8a8fdc3652fea4823e109e3d81cf","ssdeep":"","tlshash":"4af09ed03e81bc4b47e36124547a0d57e58df44880fc79e0a6f8c6d0f5810245d9c73d","size":496,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-09-29T04:42:38.457731Z","times_seen":56079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"03846f9824e92f5e7d3f62e8713d47c6","sha1":"213d679fcd16aea7b17f05a04f4c72cbfdaaae35","sha256":"217d8cf03eb4f191f072659dce350b80bc23d97219a4b55dae7f1eb96cbf16fc","sha512":"77a0685f50c6238077ebf0adc40479ebe6f7c13fd89baf33f58f1e344160cb43bf75c274faed6aeeb0d7a25813e1da5d41ae60bf3c546366da897e7476da8226","ssdeep":"","tlshash":"eb11e18135827b8783eba28140670e60e17ef814899d70e1747587d0eec0b30ca8db68","size":956,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-09-29T04:42:38.460608Z","times_seen":56082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a59aaa8925f1d6db41fb89bb017255c0","sha1":"07ab4c2f735e6116f0fd5009b8c758ec2e772334","sha256":"0044c6e874feb009378c626cd206b98f114070caf5b3c4ca1e3cec6923756466","sha512":"6575ec8d0e7e256b0e12bb2b2a0a8540fa0c931f26a21f6b42548b4dce073f47dc7a639ce0e7d2bb0d6a1aaf737acf4f2cf4667a0117bbb6c7acd88bf1ced3b8","ssdeep":"","tlshash":"9cf04ec029837a5b87ebb29200b70f61e5adf85455ad71e2a475c390f8410208a4d62d","size":636,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-09-29T04:42:38.458323Z","times_seen":56077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"05875b1ff70334890bde3d10abb7285c","sha1":"f92d9ebd14575493e8bcc646a4e3c51049c938c3","sha256":"473ddf16120d811a56d372dfc3bacb4e5dee2e244d4a5760e32ab16a1a1ca839","sha512":"57faec76866f1fed87faf86fc070a2a0bc3e285dac0b89fc027c634f661fe1b9089295fdec961ee972087a07d32ec6bd80519ee5389014074be00aa6cef627ed","ssdeep":"","tlshash":"e601c29235827b8747fba34244770e61e56ef858889d70e17475c3d0fdc02148e4db6d","size":804,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-09-29T04:42:38.461806Z","times_seen":56065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-29T07:48:31.26611Z","times_seen":762120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","size":848285,"data":"","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-29T07:49:58.557071Z","times_seen":4750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/MutationObserver.js","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e52201e96af18dd02c85eb627c843491","sha1":"5bcdd1480b9bebcddb0d82083bdf03a7435d59a1","sha256":"397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a","sha512":"2ddea7e1c2127a0b7a2f19764a1ac1cfd26e2d3c3189647fa3bb987ffd1107f30a9bf219d24726047fe84ee72802b515f6290cefba02df1d854c70f0d3a37d8c","ssdeep":"384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw","tlshash":"e3b2949665d692a71d53303ac39f2214f234d24b2206d9803c8ea7b62f19b7453bf7ce","size":24573,"data":"","first_seen":"2023-03-07T01:32:42Z","last_seen":"2026-09-29T04:37:27.686094Z","times_seen":4839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/jquery-1.8.3.min.js","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-29T04:42:38.431818Z","times_seen":38708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/site/footerSignup.js?buildTime=1790626268","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b81b2d52ba9d2e2c64c31ff6a24cd7","sha1":"6b5689250661646ecbb841f2475f1556a113373c","sha256":"e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96","sha512":"5657ee166a1eff5deea7a0125edd6178541396dccb035785f5790bc1c57dee6b0e1c9d063d00333e95667f699d99172796ce301edd1df2c4bff02d25536f0d0c","ssdeep":"","tlshash":"9f71336a7702247df3e2682d775f3538a0ba411e477dc690f70bd7242a38d96623ac36","size":3600,"data":"","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-29T04:42:38.437658Z","times_seen":11029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T07:41:42.469487Z","times_seen":85705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"fb1fa750e498ddf325936923cd0d356e","sha1":"b1ab9e64280aef735182b255db6fe273200412a8","sha256":"3db13173dbd9eb042356058f38b5c9b76a30cf82ed9251c738d23eb6827502b1","sha512":"1b83bd6b6934575a30e0134ffaeab9d8058b74a1f09d468b9599864240169cd8f5d472a92eaf486043da99f12af96dc409f2f13c0d458bc27b2d89a45ca864ad","ssdeep":"","tlshash":"f7218e5916817f520ba7a65054363e11e56eb564c88cb0f076ace7e0eed0f38896cf78","size":1129,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-09-29T04:42:38.461206Z","times_seen":47844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"66e4bb7dd9fa7ca08b26b871555d6596","sha1":"c825a80820637c65336d9ed9220f7aa4fa7f51dc","sha256":"ac66d793b40644e1b2abeb8f8d68118ead8c6615f95c0f56c67c35ca16871d2b","sha512":"323ffb2ad880ba6c35da3c4c8bf2a175b10862d4bf6a70ec660f67963e9c740086b7cc4d2ecd03de850503e59c8192c930999d42eae91ba3d7ececc115680330","ssdeep":"","tlshash":"806000a008a200080c0000000003228888002008a2a0808002808000a22a0e28800800","size":17,"data":"","first_seen":"2025-07-05T23:10:52.874298Z","last_seen":"2026-09-29T04:42:38.459293Z","times_seen":3860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/site/main.js?buildtime=1771974631","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"332bbc690aa09af197c58a87869f8319","sha1":"55aba53ec18ffc74f3198b6e3cb82c5121ae95c9","sha256":"bbc96de10a2edd1c6c1170882832dad8409eb55df2e5ae9f9530d110cc03d7c6","sha512":"fabf94b8ece40a06e54a385b38d12db5dfc0f4f8cffcf2bf2d833fa8d59579713dc7cb21a0bb427ccc1a468c2726ed9209d02e9e687c3f226ab83f2de1024dd4","ssdeep":"6144:kW8OfwjsLhWdFYveSxzRNIHftOma4kbEymdiaY9AnbViWoXb99xQ:vfwjgf+1Y9An5iWq3Q","tlshash":"07a41ac93291753683fbb1b5502f210ab277996a654a801cf179f8e6bcb8d094237f7c","size":481002,"data":"","first_seen":"2026-06-12T09:31:28.130988Z","last_seen":"2026-09-29T04:42:38.441801Z","times_seen":1495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.pxuMenu.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac373d716afe4270df40f60417b0f418","sha1":"aba148148c771bb66b0b4aeab6eac8eb40352745","sha256":"f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a","sha512":"3faf2fe9c98144f41a3ab614e23e1d488aaeb2c944a3c736c196c69175c96e4d78d2fd69c0b05a5ddcaab819c0fca2be40dc2c178257e2d0afa2523072cda985","ssdeep":"","tlshash":"8671cb463cfa26e2aa6370b99b9f6054a372010bd60add1034fd83951f81b7805f3ef8","size":3697,"data":"","first_seen":"2023-03-07T01:32:42Z","last_seen":"2026-09-29T04:37:27.664327Z","times_seen":4834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.revealer.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c22ab67199a33d876512504cda4ff55b","sha1":"36e96eae4644b6028532974fe5186a072792cb37","sha256":"c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311","sha512":"9c11487f2a00b4dca9c04294f4f422ae0df00828de989ad64f506446c72e91e64d0b47ec243ae75b3eb88ca5c882e65c9a8f6d99b0c8bed4541f767a3dc1c31b","ssdeep":"","tlshash":"8151764630b2327a177bf939879fa4083525a067740acd387dae52a92f11c6903f5fdd","size":2828,"data":"","first_seen":"2023-03-07T01:31:58Z","last_seen":"2026-09-29T04:37:27.655147Z","times_seen":5379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/custom-1.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"214dde43cebf15418cdcc76f9677ee46","sha1":"6e93acebfa271d3fce9626034d03f942d3b628a8","sha256":"cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7","sha512":"129ed41723fa08403f686dfccabcf4f2aab7ddabd0c1802ce52012ea88bf2cb1bc284019179749597a10acdb4f02b154e89249a14421329ef28b30506a1a8ee8","ssdeep":"384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M","tlshash":"9762545ef4f326a24a37302a97bfa05077374007a606ce107dad47c96f91934a2a7bdd","size":15719,"data":"","first_seen":"2023-03-07T12:09:30Z","last_seen":"2026-09-29T04:37:27.646281Z","times_seen":4277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics (legacy version) is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1487072 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/favicon.ico","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:03:00.344Z","timestamp":1790647380344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY; _snow_ses.ed88=*; _snow_id.ed88=d05e6625-5ac6-4fef-b481-d7b48d6583e8.1790647380.1.1790647380.1790647380.0172e279-aa6f-4620-a8fb-1554280d4470\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:03:00 GMT\r\ncontent-type: image/x-icon\r\ncf-ray: a42768af2d212efa-OSL\r\ncf-cache-status: DYNAMIC\r\netag: W/\"4d27526198ac873ccec96935198e0fb9\"\r\naccess-control-allow-origin: *\r\nx-amz-version-id: hkWFGfr7EBc2rIsLFSLjA3f63qXoqtmh\r\nlast-modified: Tue, 29 Jul 2025 17:11:03 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: z40a2\r\nx-storage-object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4\r\nx-amz-id-2: nQO08W1RNqWRHEbF7yc60CcOoIigWXZuCrjA2WwIkDNivGcRnnbt85WoLPtfd//bN5gmMuLvBX4=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 0VQQBX7W8WVR3SH5\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2467,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"4d27526198ac873ccec96935198e0fb9","sha1":"b98d8b73ad6a0f7477c3397561b4aab37bf262aa","sha256":"40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4","sha512":"1ee4b73f4da9c2b237cd0b820ffad8e192d9125ce7d75d8a45a8b9642ce5fe85736646caf12d246a77364c576751c47919997d066587f17575442a9b9f7cc97f","ssdeep":"48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7","tlshash":"4791fc0754249ac3e07472be038f791d9b809c4297ad6ca8bf84f9fcdc5598c22173a1","first_seen":"2023-04-17T22:35:47Z","last_seen":"2026-09-29T04:42:38.424806Z","times_seen":17583,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T02:02:58.679Z","timestamp":1790647378679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a42768a4ed3f2efa-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=30, private, no-store\r\nlast-modified: Tue, 29 Sep 2026 02:02:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent\r\nx-host: grn109.sf2p.intern.weebly.net\r\nx-ua-compatible: IE=edge,chrome=1\r\ncdn-cache-control: max-age=30, public\r\nset-cookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY; HttpOnly; SameSite=None; Secure; Path=/; Domain=weebly.com; Expires=Tue, 29 Sep 2026 02:32:58 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY","quoted":false,"path":"/","domain":"weebly.com","expires":"2026-09-29T02:32:58Z","raw_expires":"Tue, 29 Sep 2026 02:32:58 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY; HttpOnly; SameSite=None; Secure; Path=/; Domain=weebly.com; Expires=Tue, 29 Sep 2026 02:32:58 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Weebly","description":"Weebly is a website and ecommerce service.","website":"https://www.weebly.com","common_platform_enumeration":"","icon":"Weebly.svg","categories":["CMS"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31065,"size_decoded":8595,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2437), with CRLF, LF line terminators","md5":"f08116203c3ac6e6e456f03bd87aab2a","sha1":"0a3f5cfb8e5809476479c9bea5a9c25361930fad","sha256":"2f99b0af023836f51e4de82fec4c069c8c49bae16c09f8142ff73ba9533fdd32","sha512":"107461db2e33d6476787db08afe55e0552f0f7976a397be9175233068fcf8aa2262048356b1d71f6cdcf3b770012bd114bf259bd122aabae53e813ddc929e729","ssdeep":"768:Py8IRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SaX:Py8IRIOITIwIgIiKZgNDfIwIGI5IVJ7L","tlshash":"d8d2b6d8fa3c6e350b7941a6e2b76ecff96fd169dc82a4c9f2dc441913e1e804255a0c","first_seen":"2026-09-29T02:04:00.474299Z","last_seen":"2026-09-29T02:04:00.474299Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":209,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/MutationObserver.js","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.321Z","timestamp":1790647379321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/MutationObserver.js HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8c8322efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"e52201e96af18dd02c85eb627c843491\"\r\nlast-modified: Wed, 17 Sep 2025 08:35:42 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: z3974\r\nx-storage-object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a\r\nx-amz-id-2: rfnQy9+8u9obJUtvEtgKHkFJagj3NXAr/wBNHFOz9IMSKrrnawIzdltDuEKgAnk5A2/LjQqn7CE=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 2P74JGWYKDY2CR4B\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Rrvfuzc6WoAN7CYqd9_VlLJKn.zh..Fs\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24573,"size_decoded":7684,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e52201e96af18dd02c85eb627c843491","sha1":"5bcdd1480b9bebcddb0d82083bdf03a7435d59a1","sha256":"397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a","sha512":"2ddea7e1c2127a0b7a2f19764a1ac1cfd26e2d3c3189647fa3bb987ffd1107f30a9bf219d24726047fe84ee72802b515f6290cefba02df1d854c70f0d3a37d8c","ssdeep":"384:BRS9Bqoq/onyBpIeggNSNreqfBWddUJtTfw:BRS9BqoTnkSNakIAtTfw","tlshash":"e3b2949665d692a71d53303ac39f2214f234d24b2206d9803c8ea7b62f19b7453bf7ce","first_seen":"2023-03-07T01:32:42Z","last_seen":"2026-09-29T04:37:27.686094Z","times_seen":4839,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/css/old/fancybox.css?buildtime=1771974631","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.324Z","timestamp":1790647379324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /css/old/fancybox.css?buildtime=1771974631 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 17:15:35 GMT\r\netag: \"6aac2037-f47\"\r\nexpires: Sat, 03 Oct 2026 07:12:11 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu156.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410032-HEL 1789830994) (D cache-sjc10033-SJC 1789830994) (F cache-sjc10033-SJC 1789801932)\r\naccept-ranges: bytes\r\nage: 658873\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc10033-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 77, 0\r\nx-timer: S1790647379.384633,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3911,"size_decoded":2020,"mime_type":"text/css","magic":"ASCII text, with very long lines (3910)","md5":"1dcebbb5a1eb8b028310ceeb72a339b3","sha1":"e254b7a35ac189fd1ce9cf8bd78593bebfe27d7d","sha256":"865cb87de9fc4d6530edce21f0103107abae6abe45cabdff2ad9af067b3d8e0a","sha512":"1fe84409ec4feaf49c31208668d29f215ea8136ea49134171f4a930963745031520068c0e17783ee557fae24590b4079e8eceeb010766466d7c8097ae97f1e53","ssdeep":"","tlshash":"178113231490301a9437ee10e7efd6cde172944aa2a307ffa61cfa61c7d67c451d6ac8","first_seen":"2023-04-05T04:34:17Z","last_seen":"2026-09-29T04:42:38.441194Z","times_seen":16134,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":8,"connect":13,"send":0,"wait":14,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/jquery-1.8.3.min.js","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.337Z","timestamp":1790647379337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/jquery-1.8.3.min.js HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Sep 2026 19:58:06 GMT\r\netag: \"6ab580ce-16dc4\"\r\nexpires: Sat, 10 Oct 2026 08:46:01 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn122.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410022-HEL 1790643333) (D cache-sjc10032-SJC 1790643333) (F cache-sjc10032-SJC 1790412362)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 235018\r\nx-served-by: cache-sjc10032-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3212, 12\r\nx-timer: S1790647379.386082,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33467\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93636,"size_decoded":34289,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-29T04:42:38.431818Z","times_seen":38708,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":14,"receive":9,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/css/social-icons.css?buildtime=1771974631","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.326Z","timestamp":1790647379326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /css/social-icons.css?buildtime=1771974631 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 17:15:30 GMT\r\netag: W/\"6aac2032-31b0\"\r\nexpires: Fri, 02 Oct 2026 10:14:55 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn20.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410021-HEL 1790071420) (D cache-sjc1000123-SJC 1790071420) (F cache-sjc1000123-SJC 1789726495)\r\naccept-ranges: bytes\r\nage: 920884\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc1000123-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 195, 0\r\nx-timer: S1790647379.396734,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12720,"size_decoded":2429,"mime_type":"text/css","magic":"ASCII text, with very long lines (12719)","md5":"e74c1eb02613c6979e5c7810e540507b","sha1":"c8ff43b2a4ced94cba2669d30fd4ff8a7c67d323","sha256":"d8d645446bb21c52290cf523f4f2c954c62ed5603bdaeb6b4c169ec970b8eaff","sha512":"ef5339d09b765e20c5a6d0728a9e0c0147bb9082c2c1826232a9978fb49772bf2d11f5d3a7966f6606d37683f45f7b25e4ec2ba9a16d3eb51b1525df831cc725","ssdeep":"192:IUI4rcfs2DJmUwwW473gSJJbfebOQzamKy:M3gSJJbfebOQzamKy","tlshash":"ea42a5d0d7680f8d2b0bc6255b40f3abe445f160fe8e0656f126a9286ac73243173e9f","first_seen":"2025-01-23T23:35:32.661194Z","last_seen":"2026-09-29T04:42:38.428324Z","times_seen":11039,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":6,"connect":27,"send":0,"wait":31,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/plugins.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.344Z","timestamp":1790647379344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/plugins.js?1772016475 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8e84c2efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"2b8d85f1ea01d2c3e8b962eac8d76a5c\"\r\nlast-modified: Sat, 10 May 2025 15:37:34 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: zb635\r\nx-storage-object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5\r\nx-amz-id-2: k8oSalC6MjZnXfSQX7FetJ0UMrDXQU2RaL7/cKYMbhYcEUaWCeYOmaD/dMBabNFfjx4vm6oWlgQ=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: R67GD4R7H1JTRHVK\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .bIZ9MPTRpQ7qXiKASmMS2w.ENLBBbXb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67465,"size_decoded":16563,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2b8d85f1ea01d2c3e8b962eac8d76a5c","sha1":"936987a7e08daa4a916c77d86937edee42d657da","sha256":"b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5","sha512":"f64d0e9fc7ed02f4c7b3cf7fd680df3a6f8f4cefadeea63553d0f0a4bb5472abf5ee754c0e056cd91272f0108910347ba6f3cf23c825fd89260cf0545dd0702a","ssdeep":"1536:59rPpU1wHKYTpQ73CHJHDuYL/OHHeZF+YwLMC0ht/uJFO0815wZDk5/2M:59rPpl1NQ73CHJHDuYL/OHHeZF+pLM75","tlshash":"a463824a3aef2250456b70753faf4180b16a841b258edb447d2d5be02fd963883f9fe4","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-09-29T04:37:27.668027Z","times_seen":7543,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.trend.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.347Z","timestamp":1790647379347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/jquery.trend.js?1772016475 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8e8532efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"4beccebe0a060b2b2c43de5c2d4512ef\"\r\nlast-modified: Thu, 02 Apr 2026 13:12:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: z446f\r\nx-storage-object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738\r\nx-amz-id-2: 09Keh6+YiAGlfxpDsL4IQfW35z6NNb9UI5g+ZRTfLcL5mkHyxfomCz9Zco0k0PKqub+INQN29xjMk1dzu9aC3w==\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: Q4ZB75WMHQ6J6RJ5\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: PbqAnd4YVf_YTU5_sFlaqN6NTexB9pNY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3775,"size_decoded":2221,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4beccebe0a060b2b2c43de5c2d4512ef","sha1":"250a779dd017877b9f360b264cf072d9e87974ff","sha256":"446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738","sha512":"09cc7f6ac18777399dcfbc22ea9069779c0d8193a269f672b62d738b79b6ef72ae4a30bd85d111d0e03e9fba29387b9a91ab6d925f0324d764a27c6416fc5288","ssdeep":"","tlshash":"1c71f189ff4625501953971417ef3819763dd0233f24e968f74e635a2f0681d029bfea","first_seen":"2023-03-07T01:31:59Z","last_seen":"2026-09-29T04:37:27.68888Z","times_seen":5379,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/uploads/1/5/5/0/155056562/uudul_orig.png","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.365Z","timestamp":1790647379365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /uploads/1/5/5/0/155056562/uudul_orig.png HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 176361\r\ncf-ray: a42768a908602efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"e068c130e29183c5a2eae6825901ebd2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Oct 2025 17:10:31 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\ncontent-security-policy: sandbox; default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none';\r\nx-storage-bucket: zd9ad\r\nx-storage-object: d9ad7998b5e6f775be41e41bcf772e7d2ccc2686f30c744b8401def3bfb74ca9\r\nx-amz-id-2: vqD7QgPTU/WbaXQ+3pCs7ovTMatyosPNNXEL4Rrj+R4k9Uqzlz3mZUPgAf4E+I5B7/OAxBVL6I0=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: PEGEGY84D0WNJS5F\r\nx-amz-server-side-encryption: AES256\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-version-id: C56J_3PdDylz_N7KkTlv2vbaBKytndnS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176361,"size_decoded":177413,"mime_type":"image/png","magic":"PNG image data, 937 x 788, 8-bit/color RGBA, non-interlaced","md5":"e068c130e29183c5a2eae6825901ebd2","sha1":"ed32ab6f73d24749f5aa0a0a0acc3d6469051566","sha256":"d9ad7998b5e6f775be41e41bcf772e7d2ccc2686f30c744b8401def3bfb74ca9","sha512":"5bbd94c39713b9c5e845a8e84f7137e6c5a09672163b3f3173c1a3e9346647cda9524a7ec6562c310ee5d750837aa27af807dc1d8ff7889653763e8071a53199","ssdeep":"3072:KKgNIanCrCuWABoqroTveM1wbmgNeOTuLe1xDcDsJn+ZK2CjPZ:KK5CLABrmRq7Xge1BYsJn+6R","tlshash":"0a04226cf1ba41a55888aca5c79d471e1b36170bb2bed5247cc37c353cb833752a1c9a","first_seen":"2026-09-29T02:04:00.480686Z","last_seen":"2026-09-29T02:04:00.480686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/uploads/1/5/5/0/155056562/screenshot-2026-02-18-092113_orig.png","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.368Z","timestamp":1790647379368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /uploads/1/5/5/0/155056562/screenshot-2026-02-18-092113_orig.png HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 10943\r\ncf-ray: a42768a918692efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"4f91f02e4dcc8d854a5f40b9c9a2e3e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 18 Feb 2026 15:21:59 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\ncontent-security-policy: sandbox; default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none';\r\nx-storage-bucket: z7b2c\r\nx-storage-object: 7b2c31cf709314e43f33c401719e9649b4848515509a5455535b8be7897a259a\r\nx-amz-id-2: 5AusYWDZDsSAlLi93Zt3wSz+mKS0aewLw1Hu6CG4lI+F/FXuTmEMTIrf4OCcRTjERVp1v2Jw1kg=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 8PQ6YP8FWF8PXFXS\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: W3nyLXcBcJASckgejLfrddKn9OkeNUVW\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10943,"size_decoded":11952,"mime_type":"image/png","magic":"PNG image data, 1894 x 73, 8-bit/color RGBA, non-interlaced","md5":"4f91f02e4dcc8d854a5f40b9c9a2e3e4","sha1":"a7885b7bf1b3ada4c34fc0d91a89a7f0565d2c08","sha256":"7b2c31cf709314e43f33c401719e9649b4848515509a5455535b8be7897a259a","sha512":"f90ee54e02be8892a8f45c2ff90aea80073749c022ab7bc2aa9e952f98c2670eb832e9f80b9bd8e6647fc7d54a61bee43854ae0a122ad3df71b8737d1da692fb","ssdeep":"192:B5AycXNAiB0R/JL2Zh6e+Db6j02S5FvPv5NrOnczr2bBwr08YO5WSg3:cqW0tJL2ZhQSdS55Pv5NV2NwQ7jj","tlshash":"cc32b09d2499c178f905133c1685f6e6dd28805aae1e97c8d3280e15fd13186af60f52","first_seen":"2026-09-29T02:04:00.482105Z","last_seen":"2026-09-29T02:04:00.482105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1771974631\u0026","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.642Z","timestamp":1790647379642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/lang/en/stl.js?buildTime=1771974631\u0026 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 34286\r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Sep 2026 17:37:44 GMT\r\netag: \"6ab2bce8-2e3a5\"\r\nexpires: Wed, 07 Oct 2026 12:12:41 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu144.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410032-HEL 1790549110) (D cache-sjc1000128-SJC 1790549110) (F cache-sjc1000128-SJC 1790165562)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 481818\r\nx-served-by: cache-sjc1000128-SJC, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 267, 1\r\nx-timer: S1790647380.661122,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189349,"size_decoded":35092,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65022)","md5":"c766c83e34d38cf9e468676c5c6a8bd7","sha1":"5011ef9c7829e19ae656437569dcd7d27e55a7bd","sha256":"cdaab7fba05a1f550ba14fa74ca37e9395b406462e6b1d60fbc93211cd70d5c2","sha512":"50912a115e43182135ffc7759ff9140c0b8e4287e07ccdddd0e87e52df793f5036c2f7245941c6d03579c2469f0e2d1ae85ff73943abb11c71eeb9e977d29d92","ssdeep":"3072:9XVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNupeNw:+EKvU8U","tlshash":"9704b64be00ccb12decb7e39fc7a5faf7969410016002b759df4c93d11916b8725baaa","first_seen":"2026-08-30T02:58:11.237306Z","last_seen":"2026-09-29T04:42:38.426161Z","times_seen":390,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?_=1790647379832","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.837Z","timestamp":1790647379837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /recaptcha/api.js?_=1790647379832 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 29 Sep 2026 02:02:59 GMT\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":1287,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"6146496c82343387789b757ab3f4464b","sha1":"bd5d774f807b235155143f4771076347f4be72b7","sha256":"f3fb11dc8824e67fb9efc3b591f2a747673aad64573ac0249189c4f5ad590c85","sha512":"ffb4a88cc865f15009d4cb99af62f00171dbf53647c5093e59129da1830aaf27917fa6fc4ef499408270480ba5598abedaaf59e7bf8f3c405ad059e0ba5d0fac","ssdeep":"","tlshash":"801121b31918a0340b3209e1e1ffcb75e452701cf16885e8d815da842e6accbce05585","first_seen":"2026-09-22T05:55:29.014597Z","last_seen":"2026-09-29T07:47:15.236749Z","times_seen":759,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":2,"connect":50,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/site/main.js?buildtime=1771974631","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.340Z","timestamp":1790647379340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/site/main.js?buildtime=1771974631 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Sep 2026 17:15:54 GMT\r\netag: \"6aac204a-756ea\"\r\nexpires: Sun, 04 Oct 2026 11:36:00 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu187.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410021-HEL 1790212218) (D cache-sjc1000103-SJC 1790212218) (F cache-sjc1000103-SJC 1789904160)\r\naccept-ranges: bytes\r\nage: 743219\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc1000103-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 292, 0\r\nx-timer: S1790647379.386552,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 147784\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":481002,"size_decoded":148611,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32147)","md5":"332bbc690aa09af197c58a87869f8319","sha1":"55aba53ec18ffc74f3198b6e3cb82c5121ae95c9","sha256":"bbc96de10a2edd1c6c1170882832dad8409eb55df2e5ae9f9530d110cc03d7c6","sha512":"fabf94b8ece40a06e54a385b38d12db5dfc0f4f8cffcf2bf2d833fa8d59579713dc7cb21a0bb427ccc1a468c2726ed9209d02e9e687c3f226ab83f2de1024dd4","ssdeep":"6144:kW8OfwjsLhWdFYveSxzRNIHftOma4kbEymdiaY9AnbViWoXb99xQ:vfwjgf+1Y9An5iWq3Q","tlshash":"07a41ac93291753683fbb1b5502f210ab277996a654a801cf179f8e6bcb8d094237f7c","first_seen":"2026-06-12T09:31:28.130988Z","last_seen":"2026-09-29T04:42:38.441801Z","times_seen":1495,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":24,"receive":21,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/css/sites.css?buildtime=1771974631","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.322Z","timestamp":1790647379322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /css/sites.css?buildtime=1771974631 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2026 20:28:33 GMT\r\netag: W/\"6aaafbf1-337bd\"\r\nexpires: Thu, 01 Oct 2026 12:44:35 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn69.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410023-HEL 1789902272) (D cache-sjc10051-SJC 1789902272) (F cache-sjc10051-SJC 1789649076)\r\naccept-ranges: bytes\r\nage: 998303\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc10051-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 0\r\nx-timer: S1790647379.396581,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29652\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210877,"size_decoded":30459,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f2b8fab32d0af3df6b39a13b4ca232f","sha1":"c46cb9c7628616ae2107458907cee92008f80aff","sha256":"3ea4aa739e6491d71a5f60efddeedf4d77e1254e6e1c4a48473a8e87def29ad8","sha512":"e4ea4fbb75f71218862eec0c0df90971f55909843c984df8619ed4265eac6a795f257e6ef55d468522a0d5c43dffe61d17e99bc1b723b36e513be1e47f3f7cfe","ssdeep":"768:tEna6MVmfv++7bqoPtgm0HcBP/ksdB0UB5KUJ0GM5BUUQNE0Lsoptr+pxPcfki2F:tEnMVmfWSdPSnHvyptr+pKRG4o6x6","tlshash":"382496f2f471373d272f4837a9a1b2fa3525f029ebd30a9aa459f420a5c86f1063754d","first_seen":"2025-05-30T10:30:28.109405Z","last_seen":"2026-09-29T04:42:38.419924Z","times_seen":9800,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":10,"connect":26,"send":0,"wait":31,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/templateArtifacts.js?1772018780","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.335Z","timestamp":1790647379335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/templateArtifacts.js?1772018780 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a42768a8d8462efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-host: blu184.sf2p.intern.weebly.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7160,"size_decoded":2063,"mime_type":"application/x-javascript","magic":"exported SGML document, ASCII text, with very long lines (1630)","md5":"ae81ab7069097a055829fb9919258138","sha1":"7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a","sha256":"5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af","sha512":"923f0e92ed682f638eca768065630ad26195f03cfd54ba235531c50d587321e45d0e0000e811f943557ba08d9c8a21a3f4b430433370c28c456acd6b094c63de","ssdeep":"192:tUpqUXGMhJpJuMEpVyfWsgBm6zCg/8LWLEBOqpJ:tUpqUXGMbpJudWgBrb/8LWIJ","tlshash":"24e10043ddf3896207b187ecb1d23962a9e7fc4cbba16b1a019c3150161ceecd366d99","first_seen":"2023-03-07T01:06:21Z","last_seen":"2026-09-29T04:37:27.666301Z","times_seen":14202,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Karla/font.css?2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.330Z","timestamp":1790647379330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Karla/font.css?2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 17:12:26 GMT\r\netag: \"6aac1f7a-6ae\"\r\nexpires: Fri, 02 Oct 2026 11:42:42 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn8.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410031-HEL 1790327665) (D cache-sjc10062-SJC 1790327665) (F cache-sjc10062-SJC 1789731763)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 915616\r\nx-served-by: cache-sjc10062-SJC, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3687, 180\r\nx-timer: S1790647379.403948,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1710,"size_decoded":1125,"mime_type":"text/css","magic":"ASCII text","md5":"922930888bc544e58fc2692226682cf3","sha1":"a913741c42ea82dc87d8c873ca28c638ffbe7fd7","sha256":"25ce2816a5a963942b0334337f6b6c931ee73cf0fcc1c976355353659c89c75b","sha512":"bc77409a2086cdba174433d08848176bc54c4956dfce629bca27ec2ee8e679f445908b057ec9e1042f77c82b113b18f783a5f879200fd706f8471177ede0a4ca","ssdeep":"","tlshash":"06314b9119ce744a81602ebc73cf8e599ace693d10496c96fa7e17447f2bc70c248f9e","first_seen":"2023-04-05T15:51:51Z","last_seen":"2026-09-29T04:37:27.645679Z","times_seen":4019,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":10,"connect":26,"send":0,"wait":26,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.pxuMenu.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.346Z","timestamp":1790647379346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/jquery.pxuMenu.js?1772016475 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8e8502efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"ac373d716afe4270df40f60417b0f418\"\r\nlast-modified: Wed, 17 Sep 2025 08:35:42 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: zf755\r\nx-storage-object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a\r\nx-amz-id-2: VMt3MNu1ptEWoy2BMe3C93qJwmac97Gepqj6gUNsX7X4Y2JXnarSgGo8q+Aiu4+Vj8XBN7t2Tiw=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: X7C1ZD9PEMW3W3DX\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5.0DOAfx7BCg2B3tr00Ccs0MsgOeZKXI\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3697,"size_decoded":2133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ac373d716afe4270df40f60417b0f418","sha1":"aba148148c771bb66b0b4aeab6eac8eb40352745","sha256":"f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a","sha512":"3faf2fe9c98144f41a3ab614e23e1d488aaeb2c944a3c736c196c69175c96e4d78d2fd69c0b05a5ddcaab819c0fca2be40dc2c178257e2d0afa2523072cda985","ssdeep":"","tlshash":"8671cb463cfa26e2aa6370b99b9f6054a372010bd60add1034fd83951f81b7805f3ef8","first_seen":"2023-03-07T01:32:42Z","last_seen":"2026-09-29T04:37:27.664327Z","times_seen":4834,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Roboto_Mono/regular.woff2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.738Z","timestamp":1790647379738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Roboto_Mono/regular.woff2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12312\r\nserver: nginx\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 11 Sep 2026 15:46:21 GMT\r\netag: \"6aa4224d-3018\"\r\nexpires: Tue, 29 Sep 2026 19:56:36 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn136.sf2p.intern.weebly.net\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410021-HEL 1789502761) (D cache-sjc10077-SJC 1789502761) (F cache-sjc10077-SJC 1789502196)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 1145184\r\nx-served-by: cache-sjc10077-SJC, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 226, 55\r\nx-timer: S1790647380.757083,VS0,VE0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12312,"size_decoded":13054,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12312, version 1.0","md5":"15d3370712cc87aee4d35ba16e639e42","sha1":"2fd44d7078073a47d4ab29418e1909b306367033","sha256":"7295944e0067d71c5d5276d397dc0299afb519f277ba644aec0b96343e4185d1","sha512":"89ac5d1e432ae59b42c809043249627b28cdc3a5cced20181f7305144bd7d5e102a1a9fc5a9758a75a17d0b3921481420a50f4d3e66cf8652d98fba624011f94","ssdeep":"192:U+hJ110ca/vfBKWejY7gYiqRnAPxzoZHR8Kgj9NdV8WeIBt5VeQDB/MDHqCjOQJq:UOJ1OtojYBnAPVobNUdV8Wn9b+btE","tlshash":"0d42b0eb6ea00da77acfe0b413775d1313ac259c73a9993426fbe746411b2c2b198814","first_seen":"2023-04-05T23:23:59Z","last_seen":"2026-09-29T04:37:27.694668Z","times_seen":4497,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn3.editmysite.com/app/website/static/js/wsnbn/snowday262.js","fqdn":"cdn3.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.880Z","timestamp":1790647379880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /app/website/static/js/wsnbn/snowday262.js HTTP/1.1\r\nHost: cdn3.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 29137\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 21 Sep 2026 18:13:01 GMT\r\netag: W/\"6ab173ad-12514\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-revision: 47c244c4dc9934dcab26c932a1649d99262ca6af\r\nx-request-id: dc1cc1c9496b44c3c67da52f3c9d15d5\r\ncontent-encoding: gzip\r\nx-w-dc: SFO\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410028-HEL 1790166586)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nvia: 1.1 varnish\r\nage: 480794\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 7129\r\nx-timer: S1790647380.888307,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75028,"size_decoded":29924,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2512)","md5":"ce5ba6afadfc28f7c14fa95adc1e1010","sha1":"72ad567dfe461f8ed5b4e1728705a212fea5d3a1","sha256":"d2cc54b76277ed03f2100a982d1c04f97f8c6974edaf6fc5a8d051c785d69b9b","sha512":"acbc64c32a5b854c235454fbbb0b49f069070ec9ce82cc1d60bf10e6b19e1296e40ab23cafeb567ee132ca0cc937789636990f73c0135fbe53448065a96801f9","ssdeep":"768:wdDFSZ8JdMS1xGPlopXbk+KQZPKOf/py7pFw7N5o9qmse9fLrJIWzAfap34VEzHW:CFSZYdMS1xGNopX5LP16FuvqT7bmVV","tlshash":"067319d83391707a87e73131287f960bb13aa862989cd8a4d761c1e07d34e4d527bf6e","first_seen":"2025-09-04T19:42:24.429082Z","last_seen":"2026-09-29T04:42:38.439818Z","times_seen":11479,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":2,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/images/arrow-light.svg?1772018780","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.723Z","timestamp":1790647379723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/images/arrow-light.svg?1772018780 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/files/main_style.css?1772018780\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: image/svg+xml; charset=us-ascii\r\ncf-ray: a42768ab4a2f2efa-OSL\r\ncf-cache-status: DYNAMIC\r\netag: W/\"552eb2e04260fc0733e5633d15c6aeaa\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: attachment\r\nx-amz-version-id: laV8xkk7MteYwKEj3_0q8s8T2cHBLyJt\r\nlast-modified: Tue, 09 Apr 2024 09:20:13 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: z705f\r\nx-storage-object: 705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570\r\nx-amz-id-2: CBrWpGlrjvJ8Dh+rPrgJd5Ulgz3wTZ58sgVcSFsTW/mHtovUVVIJ26kK9sTI019okpawV3YKtEw=\r\nx-amz-meta-btime: 2022-03-19T04:38:52.73Z\r\nx-amz-meta-mtime: 1647664732.73\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: R72QV8RZHH1QPY0Q\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":1380,"mime_type":"image/svg+xml; charset=us-ascii","magic":"SVG Scalable Vector Graphics image","md5":"552eb2e04260fc0733e5633d15c6aeaa","sha1":"0a9efcc3b0ebabb23a49a00061fd8200eded1613","sha256":"705ff3240de004523ff9d628b28aad705ad3f0ceb046312495265a4042c67570","sha512":"16cd125a26b1604144d6a64f45d1064ff2a71da412cf61c829914e00c2e4aa275a172d0872a9533f79d5fc2d2be82a7dfe3fe5f12048c23af927a7cb35d571cf","ssdeep":"","tlshash":"ba11abe816fd4428e015c721e3f87546993830db42c440e8b29d2a68bb290a20cbb2a8","first_seen":"2023-05-01T11:44:44Z","last_seen":"2026-09-29T04:37:27.663046Z","times_seen":2494,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.332Z","timestamp":1790647379332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 17:12:27 GMT\r\netag: \"6aac1f7b-6c7\"\r\nexpires: Sat, 03 Oct 2026 14:07:44 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu158.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410022-HEL 1790214202) (D cache-sjc10030-SJC 1790214202) (F cache-sjc10030-SJC 1789826864)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 820516\r\nx-served-by: cache-sjc10030-SJC, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4021, 68\r\nx-timer: S1790647379.384734,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1735,"size_decoded":1131,"mime_type":"text/css","magic":"ASCII text","md5":"204d9ee2b1ba92dce365ebf87bb351bd","sha1":"ad8b5c3b16ac7193ebc1a549a6e62f07d6a792bc","sha256":"dc887b20e92d735dce5c25a3351ef2b8b6b189e856a3ee64cb0429a3d7f46730","sha512":"4ec405cfc62934c6b2bcd594f0abe08549a10ea1198a2c684703dffe6116ac813ac2db8afd5511bbaa8d07e92b1aa9abe971780575f861ea5aa68cde168d4eaa","ssdeep":"","tlshash":"61315b8118cd744a81601dbc33cf4e59aace593c11896c9afa7e17547f6bc60c288f9e","first_seen":"2023-04-07T13:35:56Z","last_seen":"2026-09-29T04:37:27.652929Z","times_seen":3742,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":8,"connect":13,"send":0,"wait":13,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/js/site/footerSignup.js?buildTime=1790626268","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.342Z","timestamp":1790647379342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/site/footerSignup.js?buildTime=1790626268 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Sep 2026 19:57:17 GMT\r\netag: \"6abac69d-e10\"\r\nexpires: Mon, 12 Oct 2026 20:12:33 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu135.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410026-HEL 1790626355) (D cache-sjc1000092-SJC 1790626354) (F cache-sjc1000092-SJC 1790626353)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 21026\r\nx-served-by: cache-sjc1000092-SJC, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 7, 10\r\nx-timer: S1790647379.386709,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3600,"size_decoded":2193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3600), with no line terminators","md5":"40b81b2d52ba9d2e2c64c31ff6a24cd7","sha1":"6b5689250661646ecbb841f2475f1556a113373c","sha256":"e06baca13f25df9c7d684fc1b1fdfbbbb95070a1d5a9cd648632da7bccc90b96","sha512":"5657ee166a1eff5deea7a0125edd6178541396dccb035785f5790bc1c57dee6b0e1c9d063d00333e95667f699d99172796ce301edd1df2c4bff02d25536f0d0c","ssdeep":"","tlshash":"9f71336a7702247df3e2682d775f3538a0ba411e477dc690f70bd7242a38d96623ac36","first_seen":"2023-03-07T01:03:45Z","last_seen":"2026-09-29T04:42:38.437658Z","times_seen":11029,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/images/site/footer/footer-toast-published-image-1.png","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.370Z","timestamp":1790647379370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: AmazonS3\r\nlast-modified: Thu, 13 Aug 2026 23:13:56 GMT\r\netag: \"6e0f7ad31bf187e0d88fc5787573ba71\"\r\nx-amz-meta-goog-reserved-file-mtime: 1549995548\r\ncontent-type: image/png\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410032-HEL 1790619546)\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:03:00 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1790647379.385336,VS0,VE850\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 9677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9677,"size_decoded":10301,"mime_type":"image/png","magic":"PNG image data, 199 x 97, 8-bit colormap, non-interlaced","md5":"6e0f7ad31bf187e0d88fc5787573ba71","sha1":"14e8b85cc32a01c8901e4ac0160582d29a45e9e6","sha256":"580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd","sha512":"a7078cac9a5319904cb47e01a426eae30a26d4af5094438f41360396c280473b9c69748b7e7a603232da9b6d0f7297fefb04c434eb8098cc6f89f7183c44ab52","ssdeep":"192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz","tlshash":"6c12bf5e9d87f4347619d24fe1c325f47ee7ce23e68dc02b18327936888b28366a1758","first_seen":"2023-04-17T19:02:04Z","last_seen":"2026-09-29T04:42:38.43858Z","times_seen":11015,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Karla/italic.woff2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.739Z","timestamp":1790647379739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Karla/italic.woff2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn2.editmysite.com/fonts/Karla/font.css?2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11588\r\nserver: nginx\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 11 Sep 2026 15:46:21 GMT\r\netag: \"6aa4224d-2d44\"\r\nexpires: Tue, 29 Sep 2026 10:26:59 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu85.sf2p.intern.weebly.net\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410020-HEL 1790163391) (D cache-sjc10032-SJC 1790163391) (F cache-sjc10032-SJC 1789468019)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 1179360\r\nx-served-by: cache-sjc10032-SJC, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6053, 459\r\nx-timer: S1790647380.758434,VS0,VE0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11588,"size_decoded":12331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11588, version 1.0","md5":"e67166d5a90970d2f16807e98b6e2f5c","sha1":"1cbfee75f4c8d6048f590b25d794defd8c6cbb44","sha256":"1acfa5454d1c7c28845055b6af96dd51a9e51223b92281263c2f9d6b2f5c4c5a","sha512":"a4bb8e49ef63d243c65b19406e97421a03444acc0a8a2d10814f6b9a613fced0fef6f5b3bd5625b658ebeb6614eb121bae938831e8ce45652e5aea658448241c","ssdeep":"192:YQKtgzJkq5r7USJJTAqC1VHvO28/j+CUNN19wZbYnSdNCuDo9pTi:Yqy0rpA3G2K+nN2ZEnSjxo9g","tlshash":"9832bf1dc406d1994ba82df4dc719b319b4435ecad12cf794794881a4e390f7f7386b2","first_seen":"2023-05-02T14:28:50Z","last_seen":"2026-09-29T04:37:27.643677Z","times_seen":2667,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/wsnbn/snowday262.js","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.801Z","timestamp":1790647379801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/wsnbn/snowday262.js HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-length: 162\r\nserver: nginx\r\ncontent-type: text/html\r\nlocation: https://cdn3.editmysite.com/app/website/static/js/wsnbn/snowday262.js\r\nexpires: Fri, 02 Oct 2026 18:19:19 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn32.sf2p.intern.weebly.net\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410028-HEL 1789755563) (D cache-sjc10061-SJC 1789755563) (F cache-sjc10061-SJC 1789755559)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 891820\r\nx-served-by: cache-sjc10061-SJC, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 7228\r\nx-timer: S1790647380.820068,VS0,VE0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T11:46:47.220672Z","times_seen":18722428,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn11.editmysite.com/css/free-footer-v3.css?buildtime=1790626268","fqdn":"cdn11.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.847Z","timestamp":1790647379847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /css/free-footer-v3.css?buildtime=1790626268 HTTP/1.1\r\nHost: cdn11.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 886\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2026 19:56:35 GMT\r\netag: \"6abac673-a49\"\r\nexpires: Mon, 12 Oct 2026 20:12:33 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu143.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410020-HEL 1790626368) (D cache-sjc10068-SJC 1790626368) (F cache-sjc10068-SJC 1790626354)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 21025\r\nx-served-by: cache-sjc10068-SJC, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 92, 47\r\nx-timer: S1790647380.853548,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2633,"size_decoded":1667,"mime_type":"text/css","magic":"ASCII text, with very long lines (2632)","md5":"b09e83d2aeac55c0d3b67186cd5009ff","sha1":"fa87cec84cc36fc2e70804867da24578ea331999","sha256":"251a983a1b4b2cc76542aa398ae6b3499978a788860b54a8081d35d7a843303c","sha512":"3e98fc9895eaa5b9965329a428a9d5eda04c442c984d1d6f18c8e608d1dd3c740e71ca38f108671ccc828981cf20dec0ff9ed97e2890744b5c409688962d679a","ssdeep":"","tlshash":"f751d1313b60276dfa7f40eef9a279dd2225c403cea749f9f186a31981c75875732a84","first_seen":"2023-04-06T04:12:04Z","last_seen":"2026-09-29T04:37:44.457927Z","times_seen":8947,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ec.editmysite.com/com.snowplowanalytics.snowplow/tp2","fqdn":"ec.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"44.238.174.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.924Z","timestamp":1790647379924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ec.editmysite.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 29 Jul 2026 00:00:00 GMT","end":"Thu, 11 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"48:17:5C:97:C4:D1:6A:B1:26:E1:21:9F:07:C8:0F:E9:FF:10:73:96","sha256":"AC:2E:5D:E8:E0:F3:5F:1D:0A:AE:03:F1:F8:61:53:CD:69:DD:0E:E0:82:C0:E6:E6:04:EC:B6:E1:7B:C7:14:83"}}},"request":{"raw":"POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1\r\nHost: ec.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 1908\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1908,"data":"{\"schema\":\"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3\",\"data\":[{\"e\":\"pv\",\"url\":\"https://signin-xfinlty.weebly.com/\",\"page\":\"155056562:843323694691063207\",\"tv\":\"js-2.6.2\",\"tna\":\"_wn\",\"aid\":\"_wn\",\"p\":\"web\",\"tz\":\"UTC\",\"lang\":\"en-US\",\"cs\":\"UTF-8\",\"f_pdf\":\"1\",\"f_qt\":\"0\",\"f_realp\":\"0\",\"f_wma\":\"0\",\"f_dir\":\"0\",\"f_fla\":\"0\",\"f_java\":\"0\",\"f_gears\":\"0\",\"f_ag\":\"0\",\"res\":\"1280x1024\",\"cd\":\"24\",\"cookie\":\"1\",\"eid\":\"55716dec-5730-49bc-a56d-461497c20fd0\",\"dtm\":\"1790647379920\",\"cx\":\"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\",\"vp\":\"1280x1024\",\"ds\":\"1280x1144\",\"vid\":\"1\",\"sid\":\"0172e279-aa6f-4620-a8fb-1554280d4470\",\"duid\":\"d05e6625-5ac6-4fef-b481-d7b48d6583e8\",\"fp\":\"4125953868\",\"stm\":\"1790647379922\"}]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:03:00 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: nginx\r\nset-cookie: sp=94a839a2-70e0-48a6-b43b-ea478cd6b946; Expires=Wed, 29 Sep 2027 02:03:00 GMT; Domain=; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: https://signin-xfinlty.weebly.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"sp","value":"94a839a2-70e0-48a6-b43b-ea478cd6b946","quoted":false,"path":"/","expires":"2027-09-29T02:03:00Z","raw_expires":"Wed, 29 Sep 2027 02:03:00 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"sp=94a839a2-70e0-48a6-b43b-ea478cd6b946; Expires=Wed, 29 Sep 2027 02:03:00 GMT; Domain=; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":434,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-29T07:51:07.541302Z","times_seen":486028,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":169,"send":0,"wait":170,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Karla:400,700|Oswald:700|Roboto+Mono:400,400i,700,700i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.317Z","timestamp":1790647379317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Karla:400,700|Oswald:700|Roboto+Mono:400,400i,700,700i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 29 Sep 2026 02:02:59 GMT\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11911,"size_decoded":1632,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"93f56d3d977f845cb1a00a7acf4b0bd8","sha1":"1926846f4325b9562435d640e890ba8ac6d491e6","sha256":"fb85c5e54c46b849f7a4f559d418201c34a80eb238b5d665a75df57def22bca8","sha512":"0f3fde3ed70954b9ae533a64c4ec4b3b58f8a7c3a0f890a5a8da776c0336a16691687450b70859530445b1cf06242c66341f32c365e2e3fae3da588e48951a62","ssdeep":"192:XfwzfVpT4ADZSOIkN3f1kN3ukN3i3OkN3wkN3WTkN3bpN3f1pN3upN3i3OpN3wp4:uzUi3f1i3ui3wOi3wi3Ii3bv3f1v3uvh","tlshash":"5b32dfa2442ba410b7832cd623cf7e35ee4f61457085c5399bfe28acace7c32626171d","first_seen":"2025-09-12T01:29:11.095171Z","last_seen":"2026-09-29T04:37:27.663673Z","times_seen":1012,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1771974631\u0026","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.339Z","timestamp":1790647379339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/lang/en/stl.js?buildTime=1771974631\u0026 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Sep 2026 17:37:44 GMT\r\netag: \"6ab2bce8-2e3a5\"\r\nexpires: Wed, 07 Oct 2026 12:12:41 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu144.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410032-HEL 1790549110) (D cache-sjc1000128-SJC 1790549110) (F cache-sjc1000128-SJC 1790165562)\r\naccept-ranges: bytes\r\nage: 481817\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc1000128-SJC, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 267, 0\r\nx-timer: S1790647379.410167,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189349,"size_decoded":35112,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65022)","md5":"c766c83e34d38cf9e468676c5c6a8bd7","sha1":"5011ef9c7829e19ae656437569dcd7d27e55a7bd","sha256":"cdaab7fba05a1f550ba14fa74ca37e9395b406462e6b1d60fbc93211cd70d5c2","sha512":"50912a115e43182135ffc7759ff9140c0b8e4287e07ccdddd0e87e52df793f5036c2f7245941c6d03579c2469f0e2d1ae85ff73943abb11c71eeb9e977d29d92","ssdeep":"3072:9XVWO97/ZoIdrvrgc5/f2XP4mTieamfKqz0/pvlU+571iiNbAylRXrhYNrNupeNw:+EKvU8U","tlshash":"9704b64be00ccb12decb7e39fc7a5faf7969410016002b759df4c93d11916b8725baaa","first_seen":"2026-08-30T02:58:11.237306Z","last_seen":"2026-09-29T04:42:38.426161Z","times_seen":390,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":1,"connect":28,"send":0,"wait":21,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildtime=1771974631","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.351Z","timestamp":1790647379351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /js/site/main-customer-accounts-site.js?buildtime=1771974631 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Sep 2026 17:15:54 GMT\r\netag: \"6aac204a-8271a\"\r\nexpires: Fri, 02 Oct 2026 05:54:27 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn108.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410020-HEL 1789902272) (D cache-sjc1000106-SJC 1789902272) (F cache-sjc1000106-SJC 1789710867)\r\naccept-ranges: bytes\r\nage: 936512\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nx-served-by: cache-sjc1000106-SJC, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 77, 0\r\nx-timer: S1790647379.385341,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 159110\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":534298,"size_decoded":159936,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029)","md5":"72520995745ae493ce8d25624cd58fca","sha1":"6b4cc62dedf97c00207a187b6978b78b47958387","sha256":"ae8602530cf5e207d150cc81f3b5d9e09b4430aa3cca9820c95f570565198e63","sha512":"0f5e6c3051dd55176778b557e8b8b1985d6a05b329fc8669c2556553483f6ffcb4031a5745da1a093a9e6f0596dd279b1a3732c2bc05f7a9727ac3675e9e0159","ssdeep":"6144:iocZIvNiY/EZ7NQ//HyBGtUD/4K0x65/hSJ2t5Tz:Tj/ybiQD5/C2D","tlshash":"12b4e7cd32d6b2aa87fbb274406f610bb2799d61684ec504f264f4d97cb94189237e3c","first_seen":"2025-02-26T17:03:12.946787Z","last_seen":"2026-09-29T04:42:38.436256Z","times_seen":10867,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.958Z","timestamp":1790647379958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 83\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY; _snow_ses.ed88=*; _snow_id.ed88=d05e6625-5ac6-4fef-b481-d7b48d6583e8.1790647380.1.1790647380.1790647380.0172e279-aa6f-4620-a8fb-1554280d4470\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":83,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"CustomerAccounts::getAccountDetails\",\"params\":[],\"id\":0}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:03:00 GMT\r\ncontent-type: application/json\r\ncf-ray: a42768acbb5a2efa-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: X-W-SSL,User-Agent\r\nx-host: grn59.sf2p.intern.weebly.net\r\nx-ua-compatible: IE=edge,chrome=1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":494,"mime_type":"application/json","magic":"JSON text data","md5":"a944dd688c99d2901d6719be713271c0","sha1":"4f5454d5d434829baf46671638610791758725d9","sha256":"adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49","sha512":"8f166a7cb9c839e108af35a6ae718a51750d3b1bc588f9f0711245340c55268f49884dcfc12a2f9b24da0f0ad4dcc01e54cea33303e4105828e9f09662a6e6a1","ssdeep":"","tlshash":"2fe0d84511783ef40fc5cdd57d2e6b0d8593951280492e3de8ce481c82c6a045133a74","first_seen":"2023-04-05T04:34:17Z","last_seen":"2026-09-29T04:42:38.440449Z","times_seen":12358,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/main_style.css?1772018780","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.328Z","timestamp":1790647379328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/main_style.css?1772018780 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: text/css\r\ncf-ray: a42768a8c8392efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-host: blu108.sf2p.intern.weebly.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45877,"size_decoded":7617,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (815)","md5":"34b0c36eb1c8901ee2c7b505026e6c9a","sha1":"13660affb8f1af8fe109d5704a7b33a332834926","sha256":"f0b2ae3b0bd7fcd9efbb851d667a3ffc23a205dbb2748d9695309fe6689b74f6","sha512":"6eec54645ae5fcb84efcc2ed3810e16063cddd1bc02ccdbeb1a2e0ceecfb66262fe7abf2281221cc291d909ea3bbb2e70923e020881672fba6a7c32d98377a8b","ssdeep":"768:lCB4zK/sAgxyG5abmOm1+nD6PkagZ9Jez/XCQgAGCiTPFE/w:lCB4zK/szhEmOfnmkagZ9J+CQgAGCiTx","tlshash":"a22321e6d2102b442b3b8564b7d767fe262ce111fa8305fc69826c55d3ce6d412e3a8f","first_seen":"2026-09-29T02:04:00.496305Z","last_seen":"2026-09-29T02:04:00.496305Z","times_seen":1,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/jquery.revealer.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.348Z","timestamp":1790647379348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/jquery.revealer.js?1772016475 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8e8542efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"c22ab67199a33d876512504cda4ff55b\"\r\nlast-modified: Thu, 02 Apr 2026 13:12:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: zc4cd\r\nx-storage-object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311\r\nx-amz-id-2: IZoQhxsm4yJW7RmRKmv9Y2dzwX8ZioKzDpnFLnmzoAD2o+plGyUrZS6nsjwunc9R28F1EdIs3c8=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 57CX6105V4YHSBJB\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: x_Fk94w71Jy0PF7HchMagAXzXwGd8mhL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2828,"size_decoded":1665,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c22ab67199a33d876512504cda4ff55b","sha1":"36e96eae4644b6028532974fe5186a072792cb37","sha256":"c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311","sha512":"9c11487f2a00b4dca9c04294f4f422ae0df00828de989ad64f506446c72e91e64d0b47ec243ae75b3eb88ca5c882e65c9a8f6d99b0c8bed4541f767a3dc1c31b","ssdeep":"","tlshash":"8151764630b2327a177bf939879fa4083525a067740acd387dae52a92f11c6903f5fdd","first_seen":"2023-03-07T01:31:58Z","last_seen":"2026-09-29T04:37:27.655147Z","times_seen":5379,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/files/theme/custom-1.js?1772016475","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.350Z","timestamp":1790647379350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /files/theme/custom-1.js?1772016475 HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a42768a8e8572efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"214dde43cebf15418cdcc76f9677ee46\"\r\nlast-modified: Mon, 09 Mar 2026 20:16:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\nx-storage-bucket: zcfbf\r\nx-storage-object: cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7\r\nx-amz-id-2: ULslfoMGZYxv1EhciIpuwGyC5oFN8uo8t5s+MAkfmasPDXoF9jjChYb38yH9HZQHaeReKjEOi5td9VuqqJCb30Hi7ckPXZD9\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 0E2DGTVWEEC894KJ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: huzxvKld2Ory_5BpZsjkkfbrgMQZ_Qbd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15719,"size_decoded":4959,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"214dde43cebf15418cdcc76f9677ee46","sha1":"6e93acebfa271d3fce9626034d03f942d3b628a8","sha256":"cfbf67a85c039719090cff2c4718de99203b1ced78cfb8fae5f7240d2f1570b7","sha512":"129ed41723fa08403f686dfccabcf4f2aab7ddabd0c1802ce52012ea88bf2cb1bc284019179749597a10acdb4f02b154e89249a14421329ef28b30506a1a8ee8","ssdeep":"384:W+1SbYbddF3bbO0ELZZRZpq0hPvF6b1yX:W+1SbYbddFLilTZpq0VF6b1M","tlshash":"9762545ef4f326a24a37302a97bfa05077374007a606ce107dad47c96f91934a2a7bdd","first_seen":"2023-03-07T12:09:30Z","last_seen":"2026-09-29T04:37:27.646281Z","times_seen":4277,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signin-xfinlty.weebly.com/uploads/1/5/5/0/155056562/screenshot-2026-02-18-092031_orig.png","fqdn":"signin-xfinlty.weebly.com","domain":"weebly.com","tld":"com"},"ip":{"addr":"74.115.51.9","port":443,"asn":27647,"as":"WEEBLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.363Z","timestamp":1790647379363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weebly.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:20:54 GMT","end":"Fri, 06 Nov 2026 20:20:53 GMT"},"fingerprint":{"sha1":"3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10","sha256":"9F:07:F6:A9:D3:D9:A7:E7:75:E4:FB:B0:06:34:28:35:F9:6F:7B:B9:51:21:87:7D:4E:45:8D:FA:52:B4:8B:FB"}}},"request":{"raw":"GET /uploads/1/5/5/0/155056562/screenshot-2026-02-18-092031_orig.png HTTP/1.1\r\nHost: signin-xfinlty.weebly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nCookie: __cf_bm=Cp079oIP9lvyKZZJf8Ne5BYoziHphkU6dbUfMuWcK_Y-1790647378.7048676-1.0.1.1-rwQmVd8gChyucP.sZQe6Ipo8BGx1PV2mB4SMrzD7NZl4XUqIkLdp9khl31bARQf_sq2MDfHUr2HU6yeYdDjX2brDq_3iZR1e32.oZ1ctbNG.F1orHpLKPHBPTovFuXFY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 6628\r\ncf-ray: a42768a9085e2efa-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"64fbd4b87af9f33e01b0a12a1feca851\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 18 Feb 2026 15:22:42 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Origin, Authorization, Content-Type\r\naccess-control-allow-methods: GET, POST, DELETE, OPTIONS\r\ncontent-security-policy: sandbox; default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none';\r\nx-storage-bucket: z2aae\r\nx-storage-object: 2aae0819caadd118ed3dc245046d2f6a66b93138687f322b89bcf8f02ba358b6\r\nx-amz-id-2: yiZozforbte2h+tLwycfyV+xsRJtmCCT5UbIz3CS6Iul/Ghztm/2btYaO4Js51lcIEZhPz+JKxE=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: GB4A4C83WTXZP61G\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 7x8TfQ44HaxDw.giBAKSP4MHITEpPKoe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6628,"size_decoded":7636,"mime_type":"image/png","magic":"PNG image data, 935 x 252, 8-bit/color RGBA, non-interlaced","md5":"64fbd4b87af9f33e01b0a12a1feca851","sha1":"e334b04524805f471fcbe0a12edf0d2a17158407","sha256":"2aae0819caadd118ed3dc245046d2f6a66b93138687f322b89bcf8f02ba358b6","sha512":"fb5ef9af2bfeb401343a54c94bec6d0fa296c0d4fccc73aa9927fc7c2a10086e4d9eecfc95a5feafb0289fc161dddadc9d9d26cb1a6f2ed4345c630f96233f90","ssdeep":"192:xcZUgUE6UDUEUh6VHErtgUmUY8iNec6vjEuc1isyQG8KBeSoYo+/f/VB0Tq:x2UgUE6UDUEUh6VHHUmUY8iwc6wuc4BH","tlshash":"3cd1088c586ed163da43fde0bf061f50caf4291d0f9e2aa4cf11e254952ee2585cb3da","first_seen":"2026-09-29T02:04:00.498885Z","last_seen":"2026-09-29T02:04:00.498885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"signin-xfinlty.weebly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ec.editmysite.com/com.snowplowanalytics.snowplow/tp2","fqdn":"ec.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"44.238.174.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.954Z","timestamp":1790647379954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ec.editmysite.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 29 Jul 2026 00:00:00 GMT","end":"Thu, 11 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"48:17:5C:97:C4:D1:6A:B1:26:E1:21:9F:07:C8:0F:E9:FF:10:73:96","sha256":"AC:2E:5D:E8:E0:F3:5F:1D:0A:AE:03:F1:F8:61:53:CD:69:DD:0E:E0:82:C0:E6:E6:04:EC:B6:E1:7B:C7:14:83"}}},"request":{"raw":"OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1\r\nHost: ec.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://signin-xfinlty.weebly.com/\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 02:03:00 GMT\r\ncontent-length: 0\r\nserver: nginx\r\naccess-control-allow-origin: https://signin-xfinlty.weebly.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, SP-Anonymous\r\naccess-control-max-age: 600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":361,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T11:46:47.220672Z","times_seen":18722428,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":171,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.960Z","timestamp":1790647379960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354446\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:50:36 GMT\r\nexpires: Tue, 28 Sep 2027 18:50:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25944\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848285,"size_decoded":355352,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (656)","md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-29T07:49:58.557071Z","times_seen":4750,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":29,"receive":113,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Oswald/font.css?2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.333Z","timestamp":1790647379333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Oswald/font.css?2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://signin-xfinlty.weebly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 15:46:21 GMT\r\netag: \"6aa4224d-4f0\"\r\nexpires: Thu, 01 Oct 2026 07:32:21 GMT\r\ncache-control: max-age=1209600\r\nx-host: blu191.sf2p.intern.weebly.net\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410026-HEL 1790336597) (D cache-sjc1000114-SJC 1790336597) (F cache-sjc1000114-SJC 1789630341)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 1017038\r\nx-served-by: cache-sjc1000114-SJC, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3365, 264\r\nx-timer: S1790647379.410748,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1264,"size_decoded":1112,"mime_type":"text/css","magic":"ASCII text","md5":"775b24a6bf448ef1741a248f4d0d1798","sha1":"c744599bc3828d7cf61211f932a658893eb0ed19","sha256":"3579bad82b0dbe568857f5550630f16e8b3cc434c0e4d3d04549033b7b8eb814","sha512":"a62a5f40f91669aeffe51d424ba9be6b21ca1f496a1048665d25ea8552cf45de4a5ce2c339ccc4ec866eb0725ef1e6645d1d92a3161aa149fe938c16bfa44d15","ssdeep":"","tlshash":"e4216d8159c9704a85641d7d73cdce244ace553e0158add7fa3e0b487f2bc24c248f9e","first_seen":"2023-04-07T13:35:56Z","last_seen":"2026-09-29T04:37:27.665622Z","times_seen":4126,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":7,"connect":28,"send":0,"wait":20,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.editmysite.com/fonts/Karla/bold.woff2","fqdn":"cdn2.editmysite.com","domain":"editmysite.com","tld":"com"},"ip":{"addr":"151.101.1.46","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://signin-xfinlty.weebly.com/","date":"2026-09-29T02:02:59.740Z","timestamp":1790647379740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.editmysite.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 27 Nov 2025 03:37:02 GMT","end":"Tue, 29 Dec 2026 03:37:01 GMT"},"fingerprint":{"sha1":"5F:DE:DD:BB:81:91:1A:CF:40:59:DB:0D:E2:D2:5F:B4:27:DC:A4:14","sha256":"33:A1:72:D2:99:87:7B:B6:8F:05:86:E8:B2:1D:CF:44:0C:83:75:0F:37:65:F1:22:68:F7:24:50:2D:AB:53:B9"}}},"request":{"raw":"GET /fonts/Karla/bold.woff2 HTTP/1.1\r\nHost: cdn2.editmysite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://signin-xfinlty.weebly.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn2.editmysite.com/fonts/Karla/font.css?2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11384\r\nserver: nginx\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 11 Sep 2026 15:46:21 GMT\r\netag: \"6aa4224d-2c78\"\r\nexpires: Tue, 29 Sep 2026 09:27:10 GMT\r\ncache-control: max-age=1209600\r\nx-host: grn26.sf2p.intern.weebly.net\r\nvia: 1.1 varnish, 1.1 varnish\r\nfetch-deliver: true\r\nx-debug-path: (F cache-hel1410031-HEL 1789596330) (D cache-sjc10056-SJC 1789596330) (F cache-sjc10056-SJC 1789464430)\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 02:02:59 GMT\r\nage: 1182949\r\nx-served-by: cache-sjc10056-SJC, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1426, 164\r\nx-timer: S1790647380.759519,VS0,VE0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11384,"size_decoded":12127,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11384, version 1.0","md5":"feb6c980c7d633c192a19b13047270b8","sha1":"9ca9a681147d49ad3ba857e740d2a335e6f61812","sha256":"8749b48067af37c72625416cc5da9fdde06df26bff1f471461dec1bbdaf43f78","sha512":"f13823e60143881a234b228d8b524407611410755fff8d5fb38277f21d3489f60fade65e30115a32a7adb460ee2d96b1beb8e3d66ceab67ce6c3c8ce2f82d04d","ssdeep":"192:Y5WtCjP0dAaDu7V+6+/ERqOUI6ZQBnNaXD4gpKL6jvTDyZwFxgIuB72gzOe6GV:Y5o8P0CaD6VjpkQBnNaXDLKov6ZwFCBf","tlshash":"5b32b02acadee129d64489d4dd465c94ee2dbe67400b425fcadfa046e413bf0cc70f96","first_seen":"2023-04-14T10:28:18Z","last_seen":"2026-09-29T04:37:27.661636Z","times_seen":4658,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
