{"report_id":"6588a8ae-45fc-4824-b7d2-6824a4690fdb","version":6,"status":"done","tags":[],"date":"2026-04-03T16:54:59Z","url":{"schema":"http","addr":"weinsteincounseling.com/","fqdn":"weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"title":"Weinstein Counseling","dom":{"size":961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (961), with no line terminators","md5":"617ac7ae40891f8ee8cee1dc8e47b93d","sha1":"754a9277f950e70a52721e2235cc5f42feaf621c","sha256":"7d1c97f8c9a08b74415fc321fae799be9ff919654ea347a2f0f6ad62e6fba916","sha512":"cf8475d247c8ce89400b4959d862f89a8a64ae1892d0323f389593613cb0f0cf44f048635f2f2d568b5b0cad088cba54472411627eb7734bb3567a65d05c0833","ssdeep":"","tlshash":"701104963dc85a38423d4712b6abb70d321697279874ec108416dcac7fb4cdbd9537c2","dom_hash":"domhash5349785f06b413655580aaf4418cc763","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"weinsteincounseling.com/","fqdn":"weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-08T16:54:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.stripe.network","ip":{"addr":"54.240.174.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":9008,"first_seen":"2017-05-17T15:53:13Z","last_seen":"2026-03-30T02:15:16.646492Z","alert_count":0,"request_count":2,"received_data":91561,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d2wy8f7a9ursnm.cloudfront.net","ip":{"addr":"54.230.245.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2014-05-01T07:51:58Z","last_seen":"2026-04-03T07:34:34.536081Z","alert_count":0,"request_count":1,"received_data":44852,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"sessions.bugsnag.com","ip":{"addr":"35.190.88.7","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-08-18","domain_rank":6736,"first_seen":"2017-12-08T07:32:15Z","last_seen":"2026-04-01T22:33:03.139063Z","alert_count":0,"request_count":4,"received_data":1490,"sent_data":2630,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":4,"received_data":82144,"sent_data":2315,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.weinsteincounseling.com","ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-12-30","domain_rank":0,"first_seen":"2020-12-30T18:08:39Z","last_seen":"2026-03-18T07:26:02.246972Z","alert_count":171,"request_count":57,"received_data":13966160,"sent_data":28273,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"bxSlider:4.1.2","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}]},{"fqdn":"r.stripe.com","ip":{"addr":"54.187.159.182","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-09-12","domain_rank":19942,"first_seen":"2021-03-08T11:03:26Z","last_seen":"2026-04-01T18:01:50.796321Z","alert_count":0,"request_count":3,"received_data":1020,"sent_data":1374,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"m.stripe.com","ip":{"addr":"52.13.226.163","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-09-12","domain_rank":7920,"first_seen":"2017-01-30T13:42:51Z","last_seen":"2026-03-30T04:48:58.822218Z","alert_count":0,"request_count":1,"received_data":762,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-03-30T00:26:07.34281Z","alert_count":0,"request_count":4,"received_data":120778,"sent_data":1919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget-cdn.simplepractice.com","ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-04-02","domain_rank":735026,"first_seen":"2017-10-30T13:41:49Z","last_seen":"2026-03-21T19:58:41.553139Z","alert_count":0,"request_count":7,"received_data":6107530,"sent_data":3450,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.psychologytoday.com","ip":{"addr":"99.81.180.75","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1997-12-29","domain_rank":29242,"first_seen":"2012-05-25T02:10:12Z","last_seen":"2026-03-29T16:04:53.312294Z","alert_count":0,"request_count":1,"received_data":22447,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.0.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"js.stripe.com","ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1995-09-12","domain_rank":7985,"first_seen":"2012-09-30T12:39:23Z","last_seen":"2026-03-30T01:22:10.582581Z","alert_count":0,"request_count":9,"received_data":3145745,"sent_data":4880,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]}]},{"fqdn":"f.convertkit.com","ip":{"addr":"104.19.253.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-01-16","domain_rank":115659,"first_seen":"2019-08-05T20:59:30Z","last_seen":"2026-04-03T05:43:25.893157Z","alert_count":0,"request_count":1,"received_data":45688,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"member.psychologytoday.com","ip":{"addr":"52.17.44.125","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1997-12-29","domain_rank":244058,"first_seen":"2017-01-30T13:28:03Z","last_seen":"2026-03-28T05:45:56.981288Z","alert_count":0,"request_count":1,"received_data":2309,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"krystan-rose.ck.page","ip":{"addr":"104.21.41.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-25","domain_rank":0,"first_seen":"2022-07-21T10:20:18Z","last_seen":"2026-03-18T07:26:02.910755Z","alert_count":0,"request_count":1,"received_data":37394,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":3,"received_data":118061,"sent_data":1727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.consentjs.datagrail.io","ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-12-21","domain_rank":201935,"first_seen":"2024-04-10T10:42:48Z","last_seen":"2026-03-28T16:35:43.916297Z","alert_count":0,"request_count":4,"received_data":167576,"sent_data":2680,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"weinsteincounseling.com","ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-12-30","domain_rank":0,"first_seen":"2020-12-30T17:04:51Z","last_seen":"2026-03-18T07:26:02.151496Z","alert_count":2,"request_count":1,"received_data":135790,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}]},{"fqdn":"spwidget-weinstein-counseling.clientsecure.me","ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-03-21","domain_rank":0,"first_seen":"2022-07-21T10:20:20Z","last_seen":"2026-03-18T07:26:02.176894Z","alert_count":0,"request_count":1,"received_data":33023,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"BugSnag","description":"Bugsnag is a cross-platform error monitoring, reporting, and resolution software.","website":"https://bugsnag.com","common_platform_enumeration":"","icon":"BugSnag.svg","categories":["Analytics","Issue trackers"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"d3mmydk2yvkj9n.cloudfront.net","ip":{"addr":"3.167.7.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-25T11:20:29Z","last_seen":"2026-03-27T13:26:51.558185Z","alert_count":0,"request_count":1,"received_data":2716,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"weinstein-counseling.clientsecure.me","ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-03-21","domain_rank":0,"first_seen":"2022-07-21T10:20:19Z","last_seen":"2026-03-18T07:26:02.432432Z","alert_count":0,"request_count":1,"received_data":33284,"sent_data":747,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Phusion Passenger","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}]},{"fqdn":"app.convertkit.com","ip":{"addr":"3.143.37.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-01-16","domain_rank":153594,"first_seen":"2013-12-25T17:54:04Z","last_seen":"2026-03-27T18:20:11.431203Z","alert_count":0,"request_count":2,"received_data":1672,"sent_data":1146,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":3,"received_data":1189974,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","fqdn":"spwidget-weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8cb1c9d4acb4adf44a68825a78fd5676","sha1":"dc8dc1d0b4e62aba17a5826d96fa1b59042e07d6","sha256":"34b70e6b22745c74a7437e5640084ce65b716c5ee2070fb698f4f8ea615f18c2","sha512":"bba5cc037646664d7ea7197790545af72a81c97acc92c1ad3cce6e03d257318b3257de51dd8f56ba9bd60ec7b7fc924607fe14c2b65973a070720fc3e64b87eb","ssdeep":"","tlshash":"f3a0018bb6d1b088ab61a13511276215a13e49a25519b0a1718ea3a13622597a192db8","size":73,"data":"","first_seen":"2024-11-22T19:36:32.359594Z","last_seen":"2026-04-03T19:39:36.166191Z","times_seen":1574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/sandbox%20eval%20code","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-03T19:31:02.087827Z","times_seen":770280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"761c9968194a8654cd582af3726ed6f9","sha1":"83ea085861b44549c7d0b46c9643939b8e3c4721","sha256":"d656ad4e346166b5ceb623490a8a87a76730222c97835ef38e20a1cb8cacccaf","sha512":"0a6650dd5ef59d2ba80e3e7a25fc0be339281b6ccb807554c1b7e66166e6df9c460b215c8ff7e4fb6cf5f863afa07c5c796fd155a2a3a1f0130f369a4acfd20c","ssdeep":"12288:kFyN5mLUXHCRDbIO14WzPsyxrRzIsu44mBX+D+AH+eoYJMdLQ23DankqhnaSUM83:kFmeRvIO1DraRKOV9AVIAvES2aLD","tlshash":"2d252a89b59bb42143db7169a13b610eb33a6911350d4010f596dedc2ebee9be033f6c","size":974963,"data":"","first_seen":"2026-04-03T02:34:17.660156Z","last_seen":"2026-04-03T17:52:28.998284Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/integration-1.0.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b23b02d04980d1b9c08b5507f866f700","sha1":"66bf78f25cf5ca339f5e62af3568edcdd6b2492b","sha256":"c74444236fbe8a7a751a8c965fa847a7461abc3cde7c2f744544156838148be2","sha512":"41a051beb8f444078ccd37bc3b00cda41452cf6a239f83fc7dbfecd0bfa93bf09e8dadc09ed0efeae92d8703f69833b23d35ee3bc693fda925994addc537aaec","ssdeep":"192:4uHDtYH6+YojMEmK7Lv74qhVV2xtQ1Q/KPlzsDo3e4ZTE7vy:4uI6+t+mLv74qhVV2xtQ1Q/KPlzsDo3f","tlshash":"4c1286b723221674c5ae9bc665e57646221433e9e6020c383c9ceddf971dcca25b07b9","size":9023,"data":"","first_seen":"2026-03-08T12:43:27.764578Z","last_seen":"2026-04-03T17:38:14.181701Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/superfish.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e25125463e3a68f85b0683f3bc21433b","sha1":"ed17fd0bf4f1d0790a2b8c0ed42bc5636781ce4f","sha256":"de374484df39f525b35a5a5bc8f64a8c00b3c6d2c95e353bbe077710adc49620","sha512":"4ac2253d5b9e8554a9d45dffc2bbf04848bd0c898d8edd795cffa04571fdeb6152b99a4acaac7766674c9e46be52efb8c6b52649c3e9f6318cf19ac87efdca42","ssdeep":"192:Z31a7G++jacaTOh0Zl049C9NmjaEg9Qi6TA:ZIDDTOhgxLA","tlshash":"52e12ec9fb9e25d3c2ba325a08af50cd623d9076dc46182ffc74e66c6c9487c826197c","size":6975,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.663982Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/backend/js/quicktags.js?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"036d13798bc47458fe7325ee211befd7","sha1":"eed25c061c2e61bbd23cd1ef8a1df3ac8d9cfb20","sha256":"856fc46223975196eaf601ea452e9a3c65d5b57f9917c0c1fc2afe84c6b89792","sha512":"31331d2ffb6358e64886219d7bc792b0092223e61fc4ad25c640c7b0bc71302b3040685a951e0c0f3f7f9d8d074437b488030f7a7cfaa1651e7e4d1d50584157","ssdeep":"","tlshash":"d641015142bc2aaa425b6167ccac01d9972d4cb63e8343cfec3994e648ce09893d6b77","size":2304,"data":"","first_seen":"2026-02-20T11:36:23.880854Z","last_seen":"2026-04-03T16:55:19.678093Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.colorbox.js?ver=20160809","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb79fa295d1ded56e7356a4f75e751ca","sha1":"1f097568c83bded0bc5b1384dae4ff93c847fe28","sha256":"c5a310590b84ddb8c45b12b32267c95961a7fc4f7bbd13828113d00abfdd24b4","sha512":"85f60176f3eca5bb373a3ddc57618d9c931fdc6a519f77fd6f0eb3083257cd32e8f6adb3f8322e7b97a50b5a4cb533c3b7eb4f3252edc22bfc2b93b49864e567","ssdeep":"384:43gsDe1DrzIZNBHCDfwzk84RM4mNjzRT89995L5eqzc:cbDe1/eizONT89feB","tlshash":"acd2a6b4e77e261e803a107dd84d43cd123f81721526b9bbfca4466c98e05ae4369fed","size":29169,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.707325Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/odometer.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ff1080b680b55a34a4488c403d039f","sha1":"df3ca7008631adb78693343dc7b929f028034ce4","sha256":"c211ac14f0c94929445fe8f1759520592dc5c40c78b5e891f007bc1936c71038","sha512":"443cc7146d98c26cc2a9dd039adb25a7bc4e6720e35c10e3ad91ddf82dea1474ed345e0c450c9ab3d5ef013ddecd74be8e0a4e17bd15b8dd1b4c8e2b8c45b196","ssdeep":"384:EyCueeAz4U7IDbEidNRf9nTZEUjcaY5uhfNI0XfnWfY0H4LeWwn6I:EyCuewU7wbBB9nTZEq457SfEH4LeWwv","tlshash":"62922f4a7ef722999713702d6fdf1104ba7a84072018d8487e2c12c5af92d3496eaffd","size":21207,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.65635Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/inner.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"54.240.174.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e506dfc98f2f03233432035bf6b3d475","sha1":"d31e6f0cb9c18d57a4b3d02709f090b7bdc39d64","sha256":"7b7e7b9f53f1089f1dd37fd009229a1c59871752400f2bd21dd49fb21c4ce3de","sha512":"83bb528b4e6c9d58c9904da7e9cdc9d581f4a1117cc126a097d2c4f193c3145383d91737f907ebb2f6c00b78b309833fe87db4acae5175230c077f98968361ca","ssdeep":"","tlshash":"0101fd963ac86e34423e4712b26fb706322257239834fc508006dca8bbb0c9be4237c2","size":809,"data":"","first_seen":"2025-09-10T21:19:46.140106Z","last_seen":"2026-04-03T19:32:49.569427Z","times_seen":55844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/isotope.pkgd.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa00896271ef0209b135251fae975cc","sha1":"d90e0b97eac84766df020fd598001819a2b08aa7","sha256":"80f40c5331af5e353615e2781c93fe9fa4286dd81c41bba36d0bbff42ba92cc0","sha512":"931f1b79b8fa767557a6a23855b4c4a5726b5d7df67dbaab7b782bd60d82ba4b8db8ca5ee101257ca830181f9ab71c78b41bc0b519890a47904657ec9c023a27","ssdeep":"1536:1FsQPbFfOqmGICoMgcZxTVrVtXmKz+JHArx6XQDkM/SCrA+6CkVV3vLb0f3vSb4P:1JOIWoTOdV3vLb0f3vJsGsK1huoghjG","tlshash":"f5b395493ee221204457f1be9b8f7005f279c05b5219e948b98f97e42fa582841fefed","size":115711,"data":"","first_seen":"2023-03-07T01:19:24Z","last_seen":"2026-04-03T16:55:19.677213Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/out-4.5.45.js","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"54.240.174.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d61b273ea36d2e71ce1a601ab0caa2","sha1":"832e652c884863f3a56a13a6a0a43fd56b5e2c85","sha256":"f2a8a36c74c59cfbe7a73d441cfd180ca6e6a9942a74ef9b240191d1c6056a59","sha512":"fe3c3e033551f745e0a8528d0afc239baf3b1045a0442aff9483a8b796ce332310de2230b6803483bd64d7cc6a0a3f420f12b95651822f7ef7687ff311845391","ssdeep":"1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqI47d+/:2sHx8vzWX8O1iSg1jboAmKum7Eq3p+/","tlshash":"608353c97aa6f45942f368ba802f610bf23f9d15044da041f6a1d8e17c791ed8273f6e","size":88737,"data":"","first_seen":"2025-09-10T21:19:46.014301Z","last_seen":"2026-04-03T19:32:49.548154Z","times_seen":56300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-03T19:30:20.028773Z","times_seen":147211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/quicktags.min.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c997e04c4b2ff8b71899819957c1e6d4","sha1":"6757186e0cf55300494518d61eb7f9f23d538f84","sha256":"7fc1c384eed2bd0e96a526374f0e116e724f8d9dd160c1260e1a9713df9ff0e0","sha512":"eb573d5700786ba58053f272d0f22920707b24fbb49e384625d44306bd663daa292716515902c1251eeb6756255c1807f466554fde51a834dcac6cd325201131","ssdeep":"192:UcDJEcGHwySyusTIFuAEymRJXbCRq3QH8cVuOT4YFS5EKanyI:LFExusajE1t88cVdhS5EKanyI","tlshash":"da3273f9f2a5313101667593925b021278369974361e29e9f40ccdd3acb894ea23bf7f","size":11132,"data":"","first_seen":"2023-04-01T11:00:11Z","last_seen":"2026-04-03T16:55:19.628804Z","times_seen":2354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-03T19:30:38.829616Z","times_seen":130579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/quicktags-js-extra","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b1e24eb97522a78d45aa99592c3a454","sha1":"33aadf27fa1d972daafc68eaa4a105c9b0d37563","sha256":"30e0b55f76e8ed3f8f6664815ab9e7fad4c2be0879a2a5ef90dcba795b675ea0","sha512":"8894d9654758044b3c249be7aa0bad17802df9f8a8e51cd01b4078350a4f84677f03e01184391c25631b119433e5e98ad13bc848513c1bfbbcf2ac8ff3810b7e","ssdeep":"","tlshash":"63417f19f9921e7743f039bd70896622487d42a8c481df73ecccc2a509e5597703938f","size":2133,"data":"","first_seen":"2026-03-18T07:26:08.5467Z","last_seen":"2026-04-03T16:55:19.732235Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.bxslider.js?ver=4.1.2","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b257e0969014adf4d5836b545fd6ccfc","sha1":"738b4da885a7c17abc896f2ef682a186fcfe07bb","sha256":"bddbba35635904eca1d7f9edc74bdbcba04ec0f5a16286fdbd8f78fb0f7e0c6f","sha512":"0eaf824d4a2dd6a487778e2723d68c30b11904a33f55f2846476dc6234f5c0d52247c0bd906b9db8e4530487fd6988cd3d6660fc2fcc4168ca6350b78ff91d1b","ssdeep":"768:WX6/gdowzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOj:G6OowOx1l/L2dy5oMnfNWVqCivA","tlshash":"4c335245e32c227e5566126cb28dcec4d7fd8236c82694b6eef0dd3ce18096901af9d6","size":50573,"data":"","first_seen":"2023-03-07T01:18:56Z","last_seen":"2026-04-03T19:28:17.338722Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","fqdn":"spwidget-weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ca3ce4839ba9091e522257aeefe3978","sha1":"4c76e99516f43f06b0d239578d698d9e10e2a660","sha256":"4bf91b35f3d3562e4aa08b8784a64cb6193ff89732621cd05e81a4269a0e3aaf","sha512":"a14a080de28d4fe1acea36c218f11f619d564f3207db7b2848554fc3b037b7582886f5f235d04f08594fd3b09fa96b89830249924b7d33aada6155c6b62cc9bd","ssdeep":"","tlshash":"3de0c0dbb452087565df85f627b5e5247153260db8092823edfd88242e6869748121dc","size":358,"data":"","first_seen":"2025-03-04T15:31:32.201523Z","last_seen":"2026-04-03T17:38:14.219982Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery-3.1.1.slim.min.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"550ddfe84a114f79a767c087df97f3bc","sha1":"310bd0c04196573315c2e8446776685ac2961724","sha256":"fd222b36abfc87a406283b8da0b180e22adeb7e9327ac0a41c6cd5514574b217","sha512":"b6a9146ffe380a32c89d48baf900dd5e346b0d603b8afcfad070970e56bdc744e8a8b053c2ef8a3107f4a3c2bdd11ee470e05557f542ffede5ff54468ee186c4","ssdeep":"1536:dNhEyjjTikEJO4edXXe9J578go6MWXqcVhzLyB4Lw13sh2bTQKmPNsvDU8Cur:Dxcq0hzLZwpsYbIyvDU8Cur","tlshash":"4263c5d9b2d67052db7730b850bf550bf07a98dab44c8d60e098c8e47d78a89817bf2d","size":69309,"data":"","first_seen":"2023-03-07T01:29:00Z","last_seen":"2026-04-03T16:55:19.681177Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/total-custom.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d80a198633eca0c8903b0eb4bf0ed1f","sha1":"289a226a458be3d8dc55f4ebfda57b293d67b3d2","sha256":"1033ac0944fabe80e8969d922ea9708dbbfad1224d3ab29b8d6bcd188d5ad5c9","sha512":"a740e243c514d957e1940c798099c18e54becb9b9d396f057483adf583d64f9a5a439e5024fb586cc3db9506459187ea583d99d47511facd7d5a4c7fd490a55b","ssdeep":"192:3jPfdEMBfceDW24WNepuihzgQlQhEwa/7C5:7fdNBfceDW24g6L1q","tlshash":"73f18506b6f97d35b073323bea7fa0043d5a601b694ade40bacd49610f9125cb5736dc","size":7497,"data":"","first_seen":"2025-12-10T08:05:18.742928Z","last_seen":"2026-04-03T16:55:19.680237Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"658648de102e9a1fa6f657510fe63463","sha1":"f30b571a2dd2419cee860240251562a4c76eef61","sha256":"a4a6646cba6f694dab8d64a6dfc0cec66808612b3f82b5c6f28bc423bcf385b0","sha512":"5b53622ee887a96149f819c96d1777c07026791538e81834c0bf98fe07c2541a8b32f2f165281da45cc73d83ceced4bdf2324f06efe851680ba1876cbcf6168f","ssdeep":"","tlshash":"dac08c88220a0c7282b627008b2fea00b402221494905d22880923044d20e03db54800","size":155,"data":"","first_seen":"2026-03-18T07:26:08.540845Z","last_seen":"2026-04-03T16:55:19.73406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-03T19:31:02.094158Z","times_seen":768737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2wy8f7a9ursnm.cloudfront.net/v7/bugsnag.min.js","fqdn":"d2wy8f7a9ursnm.cloudfront.net","domain":"d2wy8f7a9ursnm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8568c163174e8c2e5f336eaaaecd340","sha1":"ac839b43ae19d2ccd11feab3b74a575cb768a9db","sha256":"9206ba27ab33effd43093776bb54588a1df2103964e14da7b93322836617d69b","sha512":"16973a7e2fe02d790169f067dfbb8482703abe1b2f526b31e86962f0ee1c1f2e3561e98db40972defc27d88879ed4184741091829a1ee3bdf2ea9051b238753c","ssdeep":"768:qHY2LhHptfQG4mE+evw6bsP44LSiTpbRlQIZ:8HptoG4l+yASuZX","tlshash":"3a13d7cdb6c1b43696636171603f600bb33b5dd9280d90a8b16498edbdb8a4cd3a7f1d","size":44208,"data":"","first_seen":"2024-07-03T18:45:08Z","last_seen":"2026-04-03T17:38:14.191658Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/shared-c7623aaa578cac8c91cb14c7dbeea7d8.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3d83b7dabc48a5a17c8069a52ea34e6","sha1":"e0d58c2e22f83c6a578720c9a33641a3d803c987","sha256":"abd292570ad7be2cb37a6a8b2546d1dc4e0d0ed4efb5513ae3901a3530f7302b","sha512":"b6261bdee6cbb3e4de604ec79d53d94feb0c080b2d90e3786e89df539d26032ca9233761bc9c0b561030388a29a1fe91010d8430646ff70aea61e0403db51cf1","ssdeep":"12288:GYzIHL6R7ADWb9tEpDPYEUDSzN4vya3JZju4KSUp0VSymMqFr/7UjpAGm0qhwiAy:GYzIr67UM9t/DRvya3tiAy","tlshash":"77153b8e75da755607c711e4e07f2d0ef33910949a881840d8f0c9ee2dbeea5e13bb69","size":885328,"data":"","first_seen":"2026-04-03T03:04:08.355928Z","last_seen":"2026-04-03T17:27:06.326784Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/chunk.30e556781d51934765db.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95eac746011aee4056d260c6dadb8cc3","sha1":"f8f03175db42dc0382f40fdf2f5c71ddc07f7224","sha256":"dcf382360f742a672fb3bd406dc2ff33a13c0d5c482bd3a75c89445edbc55a25","sha512":"2f9c48c1aa103628d916c6589e15c78bf32ad1ff471b1a96c52cb623ef29b5b39ddbaaf9f07b8fb3f9f4901e47fbbf1d26da6fca68120c304531b982f4bf8ceb","ssdeep":"49152:5BtFPbync2o+HdioNaHt9FVUEAdVoogtOWf+FoTjKUEBXVtJ6vM82+5fYds:K4ZVUEAdeKUEBXqQds","tlshash":"d9266cc6a126bc35eac9c2c7c9335446e67c6019610950f8bbec98fa1f65dc351baf32","size":4514462,"data":"","first_seen":"2026-04-03T16:55:19.737125Z","last_seen":"2026-04-03T17:38:14.220842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c709017743c0759cf3853d1806ba5","sha1":"72e21587610c49c8305a55e71f73fa88ed618205","sha256":"ba2338aa6670580269c762f51c4291daef913201aa8f4d4fd166c1a878262652","sha512":"974e260ed8bd1d99628fc3248f07179f6ea228e37a6b9d3ef906dba57571f2df54d73f93d1f3460902d28a90bd4793bca35477b2ef8fbf424b9112147f04bccf","ssdeep":"","tlshash":"13f0507a75620d7c819e844173df7b00767bd86944057e01865da8c4b760dcbe257bc9","size":526,"data":"","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-04-03T19:32:49.514009Z","times_seen":78056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/vendor.362e41e7fcb9e690070f0ff993d94548.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"362e41e7fcb9e690070f0ff993d94548","sha1":"174247edd1d1649241e21d821832669cb7a6835d","sha256":"c1bc0fc54ee25ba949cf0bdd0e3287a8ad0fb650b98b8fb0b6821966b2be89d4","sha512":"24b84706bb4d1a429d7e3936a1324936b0377e9df592bf8ae0007531a9da7856464a47400b937e02c17fd7ae9dc10662a223e8cfe7c5face012c41a7c5e1ba0f","ssdeep":"6144:/SA0hRZ2hBbkdCPaqDs2m9t9My17ESUJiNRbxX6m3F3PyHWCCdnDbybNBRFey4te:N0PZ2hBbSCP1PmNp17ESUfGQW2Zbx7","tlshash":"5ae42a997392b4a143e361a9403f0103f23a2959680dd058f365e8eb7cbdd8d617bf7a","size":710592,"data":"","first_seen":"2025-06-19T23:27:31.993328Z","last_seen":"2026-04-03T17:38:14.218929Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/a22b5a1b-826e-49d7-8b32-a362e2a04c4a/0413eba0-10f5-4111-bce5-93b82795f17d/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e21a0fe862b481fca89004218848ca","sha1":"82c783e7b0d1764359e6c9090902fb31c9eb95fc","sha256":"5df8c1e1b719d3f3712d869c78cf68bfa5a0a6217602e9d7c300e7237ab9f665","sha512":"cb943c83588889bee89f84a6440b750533f317f2aa215e879765c31dc348f66c3b35e033571a099922f6d893ba9d19d332178aa4ba423d15d596805dc7c4d0cd","ssdeep":"3072:SvPJGNbvFgH+cPEqUqVzScOZgNjiltXxVs:MP0bKPEqjhBAxVs","tlshash":"4ef36cad73a9712c9e98098d3cfda529f9681c46b4108c3c97cc1c8531f7e9a27e476e","size":164833,"data":"","first_seen":"2025-12-19T04:32:06.848512Z","last_seen":"2026-04-03T17:38:14.163296Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.psychologytoday.com/api/verified-seal/seals/17/profile/838726?callback=sxcallback","fqdn":"www.psychologytoday.com","domain":"psychologytoday.com","tld":"com"},"ip":{"addr":"99.81.180.75","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4982803470b25cb2280b7891ec0b678e","sha1":"6cb86776bf966e6c476d6ef856d0f73e2c72262b","sha256":"ab7f17c1deafcdd8c4ab0138b43dad43a96eb418f4151a40700d7a4ccd4daaa7","sha512":"01bc7e43038580a5e6245f6580ee02a75085c6073db06cf847be32589a827a301118d2c2f5631bbe74ce0bdc6ad23e955df94d1fad503c5f1282d51a6c45f027","ssdeep":"384:kPBgwBUQPh2alwfUZwDdY1KauGks4QPh2alwfUnaCoMSbrelkrw69:/CJh25c7KauYFh25caB9","tlshash":"cba2c4575d0fa7965c103ef746ea39463848f0418aa3e7c4f2b55afc866f3885cc029c","size":22171,"data":"","first_seen":"2026-03-18T07:26:08.374272Z","last_seen":"2026-04-03T16:55:19.648696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"member.psychologytoday.com/verified-seal.js","fqdn":"member.psychologytoday.com","domain":"psychologytoday.com","tld":"com"},"ip":{"addr":"52.17.44.125","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb9764d22cdbc8f8f87d23415d8bd052","sha1":"d2561376ffcdeb4100455df7519d43ef2698aa09","sha256":"f35876ecf9a2fad74c8c5576e354c5fabc4fa88f7b532e233bd6084a9e5f945f","sha512":"626e6d96c16656b277d3ab93919b108ff36251bef0fcae65c2999cca73d3fb4198c5009cb9cb4042fb5bfbd917995a1919f187d0e262f31d6e28b3ff8ead25b0","ssdeep":"","tlshash":"4a4174752f9478bb132310f98a2fa14ff5749c785645c50082a8cabafca4d9d2171fb9","size":1963,"data":"","first_seen":"2023-11-21T12:02:11Z","last_seen":"2026-04-03T16:55:19.703091Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1290678f4239be1b3606a85e9af1841","sha1":"308f14d922cb970235151f2d5b43101f3e0ccbfd","sha256":"8f5643b21a003e17ebe2b5888b3e50fa4a4f7bedd08d90890d3ca42fc7bf7013","sha512":"216b3317a40bb21d679574e37fe27911f0cd5dab0c1833f0ef2c7d7f426e3b1de9a4ecc4b12ce526d2da483e856873bac58f81825ed19e00f37a5f488d3c94de","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sd:JN0LE0+1lfYsvSg","tlshash":"f381a696e77a38cbb2f900f2697e0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":4200,"data":"","first_seen":"2026-03-18T07:26:08.538753Z","last_seen":"2026-04-03T16:55:19.740768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/chunk.05d05086cebf955ab539.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ac2a1eaf84437f49b8d36f14f3ab5c","sha1":"c2b09b9025489ab329c788b68349adfb201fd99d","sha256":"5134a293cc37e3dd112c17f341185337e854badf8d1c3703ddb9aa319f9e5de3","sha512":"97b321c372964d6817a268b91c7cf3f3d0ca1501aa5b19dab0aab458062efe2ee6e2a3710ccd4ff1b166a42a12a67ac2bb085633cb04b41377dd6e547d6f6492","ssdeep":"384:ezxCkzibQcqCcUs48SYD9nzJyoDqlHPAQYD:ezwVQcqCcUs48SizD8HPAH","tlshash":"9ce275926c8573eb41bd8d11577bf3e17a438da3535ab885860dccaaab4cc87b0c18d9","size":33469,"data":"","first_seen":"2026-04-03T16:55:19.651053Z","last_seen":"2026-04-03T17:38:14.175674Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/slider.js?ver=1.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8c8698c9882efcee263198a6aaa0b59","sha1":"b3d392f95629e7ab5c3d53b5249f1c13cc58b208","sha256":"18f00ce551f1f95e667475ffd05df1149b359b9a38b9981a6c9c5aafb2cc23e9","sha512":"91c2c209e030afe67f8b009da34a3ac2fda60ea61a9ec18426d521de4deed6310327b497cf0141228060f4ce2e9ed1154a4df593de79422cc9171a35bf573048","ssdeep":"","tlshash":"91316d18fbd8257c693b2bd5397ad84ef2b34c011707ca12e869817c29d09954693fb9","size":1662,"data":"","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.635642Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.stellar.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","size":23282,"data":"","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-04-03T16:55:19.629866Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/owl.carousel.js?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"44c60ba8339e0c4431bca54885fed7d9","sha1":"440e2ee72523ba194cc3f6ef11615f546318a058","sha256":"8119f864951b9c0749670989a02ededc2b282a0c491b57e6607217ec597fbdd3","sha512":"88299fff84a76874be02ced8887f516b6a257207a671dc4b12eeda7cc12946230f21ba2b7efe2bcea19d746a4e61b27431ee0023e18cb9d86c32097c21be164d","ssdeep":"1536:oW3i6KkMcB/QGhTfXd53NDp0Qdgo2hj3Mx1oi9C9RWR:oW3Tv/QGBfXd1Hgvhj3CVmRWR","tlshash":"7cb3610977f91016812731385f9f2246f236810f9915aa4c3dad93ec5fd9a7842baff8","size":109717,"data":"","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.705714Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/wow.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea81e4551d35835e87309a679fa22df4","sha1":"6ecb988432bae56dd5a710cc32fa03847670a98f","sha256":"f11c99e3d36695925003b17b9faaecf2339bd1a9b045bad6da6bd4a7f562557a","sha512":"6e00b8f29a9a090c781a838f0e64c8f98d48c0c691eeb37c9628155ca5c7a2b8ddb9732bc5c96239e8ed0790681ff79f97f93a494d839bd2d45c2ff228f2f3c8","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0ID:cRZmU+GeKrAq6aItnefKh","tlshash":"ca62cc883eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa053897fafb8","size":15547,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.665497Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/controller-with-preconnect-4a008e08138b5012238eb5b2faa1a1a0.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c2fb9fb172867ff72fe8ad6d01397df","sha1":"7ec79bbe08515a6c6e2f7a3bfe47c4a8fcc32084","sha256":"b3982f8cbad14fdb0bd1dc6896e367dae7299e85aeb6ad96dbeeee25d0610500","sha512":"0fd41ad0f44f695b9c1c042be3912de7e26c163de759bb6b3613b0268f95ba2ccaf15b920f2037165fbee51883bb68d512dbeeac6b10d47d6080d80cb23884fc","ssdeep":"12288:va9lLlj8a6lnTYQoHfVBZ4BHNvX2EduGAskE8n0plrDMR:vaJ8D5oHfVBZcvmEduGAskE8n0zs","tlshash":"6a454b8db697b42653d7a539e02b500eb33d6c54310e0801fa66cdda683ed97f533ba8","size":1209374,"data":"","first_seen":"2026-04-03T03:04:08.423774Z","last_seen":"2026-04-03T17:27:06.359615Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/18a9c36ed1.js","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8ad70895554a9787ba0c6d0e82243f","sha1":"fbb7caa3f030769490ca0529c97690d55ee6b819","sha256":"ccde569e327cb3980aec6e409bb66bd407941d4b9922db8d65fe01fb036a5d76","sha512":"bff43e20b8919e531eaa449e248924a016c9c42630f3c35438967e71fa9b503d523277d3ee606b300bd34ac2dda98eadf244ad1279e6e8e4ddcae2c10116b8cf","ssdeep":"96:t1p+BJu9lqR2xyP3i+MxDJwqs4QO5l64Zhid1zEyDJ4FqsG/Kn+JP6nUsj1Y7GP/:gSlqIuIQqirlING/K+JYlPmq6NGAjRMV","tlshash":"9a12a46d3625727e92637172a1bf634f71325066f805486060acdce47d38ea9123ffb9","size":9496,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.642789Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/convertkit-js-js-extra","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee5cebf89835c8874cda1da71993bed","sha1":"f52b4cd156fffd1f462e802c6a5f2dee0d8ebaad","sha256":"20749c0e71707b7314985760c7df73b4283213263a16aa6bf8a943c97cd9e1c2","sha512":"db38146a8eb0b8d18b4219d0f80f61bf86458a4642133dc07211fbebdd83c35fdda3d460c04e69be5e950bce51ae08fe4db6a96e24f2d375c53dd4a64b0efcb9","ssdeep":"","tlshash":"3031c0a1c8cc2ed11f4828f0a4a933e19fcc2551c4b0aacb81cca00403b4e8fc1c728b","size":1487,"data":"","first_seen":"2026-04-03T16:55:19.742721Z","last_seen":"2026-04-03T16:55:19.742721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/frontend/js/dist/frontend.min.js?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c1d2b60be23d2dc908d056b1a7e914","sha1":"0602195d1c196f43ff759a39eb343569ff3daf15","sha256":"de975024a289ce0e4cc76629606400ebe202c9aa01a28367e135a8fce5fb8b22","sha512":"a10974653eb304814e92cf623a128c9a114b0878a1ef3f758e2a1e5a5d316ff14aaac56c599e09da6f145b14b190dd80324299ec7ab0d7ad4e32658c536cf415","ssdeep":"192:pRIpqf+CeS4fu1oWKtu3Iv2iTTaBw5yv6E4N3yqp76ypyuytBy:rIq+CeS4fu1oWKs3IOiTTaBw5yv6E4Nr","tlshash":"91e14470bcb09cb00b7b057b55ae2741f73156de94474698446848981eececec2f2b7a","size":7370,"data":"","first_seen":"2026-03-01T20:54:48.980961Z","last_seen":"2026-04-03T16:55:19.664997Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/customscripts.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e19667ffb842b8f6bed71bbecefe6f","sha1":"9bb5b2c097d7e6ac044711a02f2ab226cb65fc0b","sha256":"28ccf6dabbf4bfed6894858f57800c71aab0ba112a4526e31b82503742904e13","sha512":"93a8400a8d70546e9d33f99b58854300badc4016e9cd97064e8fee24b7bec5d76a15660483ce416e7173ae879ce1c439f7ede237db8e35a1651c98dc7230c274","ssdeep":"48:wcpeMNS9aBY6JsmttiRM7/wLg/ZA3yEkP7MFINLHMtfLdfCgeuFy8mjkFkjMhkd/:rBGlMdcyE89stLdCcmjU0dwL2O5Fk+/Q","tlshash":"ab918149bce121b15077e42aabbf9144fb2aa14fa60a9550749d5d848f1332432efbec","size":4243,"data":"","first_seen":"2026-03-18T07:26:08.50238Z","last_seen":"2026-04-03T16:55:19.632106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/SmoothScroll.js?ver=20160809","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26dbb7e7de82d867836d44aa48106d1b","sha1":"79ce0664855f69f309ceaa96bf22200f3143dbc5","sha256":"b4ff222f0ef701c8f9bbd9509e19b1094195604c8d2a3f319bf947642090b7b8","sha512":"a537db7790e7d03c70770d9764a6d24024d6ec9f7679945a755ac0f6e01b2b1bcd13dcbd5a58e220d518f719063ed9dfd1474b700a58221cb79c48dc3e520d19","ssdeep":"384:zhtB3DPRPBZt034JMaXH78yoVzPRfBAGd2FuV4FNy4CFRWz6K:z7Bdt0wb8yoVtBNg7FENszf","tlshash":"5a92c49556e32c62166b613e976fa2c633740043110aed25380dbfd82f8cb7453f6eea","size":20555,"data":"","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.638505Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/convertkit-admin-quicktags-js-extra","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8ee0c96373c2951ee57ff31d09484c7","sha1":"b34d866b5da665da191c6eb3abf8b733684e4dcd","sha256":"b0088743cace857d4280b894ac6d8779eec4fa611bb8ea374efe71bc818b6358","sha512":"83d0409d9c87558fd5254799556e589ec220faab9d2832d4c9b5bbe0c8a4a2a106f4a2cf825e599266ccaf9659ad2b8660c9b0bc1031187468ebdba9328bd552","ssdeep":"","tlshash":"af711655e065edb12b268272e4ec3b03e89d4028d1e176e6e6c4d13a82fd65df0a532f","size":3810,"data":"","first_seen":"2026-04-03T16:55:19.744646Z","last_seen":"2026-04-03T16:55:19.744646Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.convertkit.com/ckjs/ck.5.js","fqdn":"f.convertkit.com","domain":"convertkit.com","tld":"com"},"ip":{"addr":"104.19.253.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9d17ee7a9f7c614b0179f15ad892730","sha1":"84fcf2040ad0e24c356966db03675a88176c49f8","sha256":"2d3e61ec97707e01e18fdddcde925b75c7c75b680487cb2c399a0d5ec147ddf9","sha512":"e86e75387fb72a690c6932d993d48f54f73b878cfc8a5876c570d81e8b261ea236548900a6d7f592895a4519632ffe609b9db72051a0278d8ebbe292c3deaf0a","ssdeep":"768:M14lM1HiOenxhEjxO9seukTKByfnS4b4GHEzCPuc6wddOWrQ4NSbr0CF5/6Q6cQ0:M14lMtxO9seuK0yq4bP/PumFS8CGhWxd","tlshash":"0a13094136a7797102638af592fb064273357984a805805cbe7c9ce76ea8dc97273ff8","size":44446,"data":"","first_seen":"2026-04-03T01:36:35.832294Z","last_seen":"2026-04-03T18:30:06.627336Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/bootstrap.min.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","size":35951,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T19:30:08.741476Z","times_seen":8584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/total-custom-js-extra","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1096badaaa13126c5c2e7a8887bd8b4","sha1":"ba9a47954a25d6556d1d9b6a1c6e4de5734fa053","sha256":"6b667e0ea3127501c77f62f69c1d1e1622da0d0c7b85d278bbb46281fdda7285","sha512":"ead568cd84c8fac5708097366733a788a57891abd346d60b69bbf7bc52ef947fb99f896b310dce945d6fe03e1958fd01bcfaa466e5ce240a339627298c67479b","ssdeep":"","tlshash":"f021c083c4cb11e11a700db050680753c25320d2c8313dc6accc80060eb0c49d2d02c1","size":1317,"data":"","first_seen":"2026-03-18T07:26:08.537786Z","last_seen":"2026-04-03T16:55:19.745595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa832091e1fbd0dc098ed68c1009af57","sha1":"42292b2aa588238b86753399e6bb59aff903d2fd","sha256":"d81380bbefaa9e74bf00df2129c25ec95fec646e01d8de16aa7e8350cdd112e3","sha512":"35e1146a5d12110248c7267e314920ed4ccc92cffa32ab051605cd07bbe3a0a503bd872b5f0974c45541ca5acf8565fb288aea26c9b355fd5ae2e701f754d3e6","ssdeep":"","tlshash":"e7e0d8a9fb0d24314934215f21fbc2dab1bc903128804837bf6472d048e591da2d6904","size":370,"data":"","first_seen":"2026-03-18T07:26:08.542017Z","last_seen":"2026-04-03T16:55:19.746559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/waypoint.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db84a293a418f4aba9fd3292260f3c92","sha1":"fa99a6634a50cde80f4c7765b79b2f594b686cdb","sha256":"25640bdc1ab3349556b2ef4c8bfd974427974f5db05fb9b1cb4b3ce850da798e","sha512":"9d2b05bf7f17dfbec1d579ee8b17b7541e3aa4ced70292ea256b21caa538df4dcb6a010350c6acdee5c7e590c671fc426410f3a2ed4862b18715e228ba99fe83","ssdeep":"384:5BSFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5iqxgn4E7vfrF/+onen","tlshash":"4d72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21351ebaff8","size":17547,"data":"","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-04-03T16:55:19.65685Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/stripe-cookies-28d0c3a5a6dfa738496e3527f2037989.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7f92037d53dcd82afca416ced1ed849","sha1":"d39e0b1c90116ebb3149eeafac2cacdc3e3978e7","sha256":"5dd1b51600de4f2f723a3ab5517562ab6fd55283e8ac465822a00a7d08550c28","sha512":"113f50c35362c3dab35b3b890293c02232a79f3e6bc64e5a5f5dd564f0fcd9d26dbec5ce96f02d81be8bfb13ea0b988bd7291a01879c7bcc98b8bc4216ab5da7","ssdeep":"768:PoCY1v+AbOiw++ddCRCBA/j9hu+aq7C2D4KamMpssXHQnhG9RP:Pqvfaq7z3UHmG9RP","tlshash":"3c53ead8319fb8d552a60128a04f3e4df3796200f969ccd89617eca12d6de3e5131eee","size":66119,"data":"","first_seen":"2026-02-03T21:01:13.057049Z","last_seen":"2026-04-03T19:08:49.918266Z","times_seen":10531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/wow.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea81e4551d35835e87309a679fa22df4","sha1":"6ecb988432bae56dd5a710cc32fa03847670a98f","sha256":"f11c99e3d36695925003b17b9faaecf2339bd1a9b045bad6da6bd4a7f562557a","sha512":"6e00b8f29a9a090c781a838f0e64c8f98d48c0c691eeb37c9628155ca5c7a2b8ddb9732bc5c96239e8ed0790681ff79f97f93a494d839bd2d45c2ff228f2f3c8","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0ID:cRZmU+GeKrAq6aItnefKh","tlshash":"ca62cc883eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa053897fafb8","size":15547,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.665497Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.nav.js?ver=20160903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e25036ba009029c7c5724a0d02d6bdd7","sha1":"55c51a27dd6a15505ebd280856b668d66d2af275","sha256":"a243c29ea5c8157385fb38de57ab177b84dee432ddf4d573fa005d7e4aa8865c","sha512":"626f9fa12a8ee8e9d38cd08bf79ac46370d0058f336549a08468031a4dbfa9954bdf38a1ad6aa5bf4647fb73f6fba453e1c71dc0e700c22c1cc1f6a41c476e69","ssdeep":"96:zPgGS3mx/1npLnnUFLDM9/f2eqSzcHK+OFI2nzTtsqV4co0dEyEm7tHxb:zPgGS3SNpbqDM9/uycXsfz5nOpHI7tHZ","tlshash":"9bb14e46a35e327bc1bb3515ec2f12c96a3d4a77f80a502b7d382dd41cd223a931ae74","size":5306,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.716583Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T19:30:20.082588Z","times_seen":637330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3675088f864b8dcc98b2c2b21f351419","sha1":"9feb3daf24fead2c96308ad7e2aa05c6ccb86c48","sha256":"3d65ab12b2ef827ca1cf14cc73e4ad13cb54d2fefdca558d9fb0a4e88b52e01c","sha512":"d4f94b941d3ea01cc9552013f79cd97ccd124054dcf3dcb2c8571a8a9fb6a453269d7637eadd6bb15151ee12e57db1f1a1664744a133efe02372727461b2e3d3","ssdeep":"","tlshash":"d2f0bbd8d7cf1051cd25e059390f65d894ad2633541a986fbdd4b24008e3a3dc295f25","size":557,"data":"","first_seen":"2026-03-18T07:26:08.54346Z","last_seen":"2026-04-03T16:55:19.747455Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T19:30:20.096582Z","times_seen":683705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b48020c32a696ca4e7bf5f18038b4a8","sha1":"bb76b6035b48975e5903a7f6dabbbfbdf3de32c4","sha256":"7eeabca5885d0975396a64b15bfd8705e1471aee24c7409203cbd7b85fdc405f","sha512":"ec1561c218fa78f8a859c9b060d64116a3b29a7db1b002891c30d49228ed2701e2a9149852adc5a3b87a80d028370d972a10feb6e95659b8462f485ff45ce436","ssdeep":"","tlshash":"84e092a8ff2c38339436202f22bf41ec712e503868408c67bdb870900ef4a5d265aa0d","size":391,"data":"","first_seen":"2026-03-18T07:26:08.548972Z","last_seen":"2026-04-03T16:55:19.74849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81312491c0dbc11625b8cc6807109b9b","sha1":"2573788fe6ddbfb79edd092f65f89fd305036430","sha256":"4951041ad361b94e763518a49967923e29dc4589e73b712a0aac4772db6a161a","sha512":"855156a75cde8cb98eac330b16e746da45013436d6d62917b8b7a679f99c5fae9ad644f4c65ae488a77bbc703a273e5484c7bf12ca8f04a605ce477685947cd4","ssdeep":"","tlshash":"82a02200e20f0cab20308008f33b2b0c388303333b3800a2003080f830e08cb8320c08","size":66,"data":"","first_seen":"2024-10-13T21:34:06.520973Z","last_seen":"2026-04-03T16:55:19.749574Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/nivo-lightbox.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05d8c04c7cffa68231d7eb0b4ef8ab3b","sha1":"7d9365530d35d557ab285888916e249424561e9e","sha256":"48a0dfcb35728a50647837412515149200110486d731dade126cbfbd8e24540d","sha512":"a2a022f7d5374825ba3caf173fba16c24667d2a4ae5f1518674d38c48c5cd4170b5a7f8232ca6a91aeefaf11b091cddd033e1e6ee567b110648ff604f5090a84","ssdeep":"192:49kQXX/0PwymfvAFCeOOzWJcMrcEckmIox:E8Pwy7ajrcEcR","tlshash":"de52139dbb7e011581f7305a1abf92b4372d413f9801a439beacc5c41fc66496ea3e64","size":13792,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.679682Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a14357daebe3c80ce2a2cef981351efc","sha1":"5c3e846fd5f7ae3b1449e0355d2ddfb350a7e462","sha256":"ee14b833750b03dec41aa3b903aeaa1886188c2f4acf7b6403cffc183c4dd3f9","sha512":"16c60e822fcdc6eb5d442d88f04ac7fcccc528dccaaf4ec1305d611f91059200a23ba850cd4ee1fe144c44c024540f9eb99cab01e0a70486d9d7a49f2ef5dc55","ssdeep":"","tlshash":"78e0921cf0fa635015bbf03d4b3f8208772aa45b720d9d80388c6da96f51239aa92684","size":386,"data":"","first_seen":"2026-03-18T07:26:08.551954Z","last_seen":"2026-04-03T16:55:19.750627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-199815255-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"227679faeae96ddd171dc87a55a31693","sha1":"db75ec94ff3a61255be2804c4cbebe4b5aee939e","sha256":"e957ddb512fab3c8e464d789a322ed8003e8599c0f68827c10d4928ba25c8ca1","sha512":"7513c377f57d1a8d54edb3194d0e904e572adef4d8e4449b57f9c90d3083212bacdfc8c1eadf21b1f352f64f2026a6cbc7998493f1babc6114379c429785aa04","ssdeep":"6144:j3eqQg9r8DP9p/F8x/cp+/5EiWc13oH1r7bkx:zN87t8h0I","tlshash":"807409cdb3da706643a3a478903f008bb27a79d2b84cc895f185d8d42e746a94277f7d","size":355059,"data":"","first_seen":"2026-04-03T16:55:19.655688Z","last_seen":"2026-04-03T16:55:19.655688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","fqdn":"spwidget-weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a102fdbda7181aedfeea851e9d04af49","sha1":"7afb80d69a12aed131d5f40f048cfda4439814f0","sha256":"f8577bdae839e94a00c1d2f99b914bc4863f4c2965ba70aec689e13e73972787","sha512":"e3f5fe2b1813df9fd81709d9d7771804622e9934f50c0f08fc6262e56eb356825749e8f0cd93d7c62b3d8851bd3599bb51343c56d139b6cddcd0cb98b4c59ca6","ssdeep":"","tlshash":"7c21014571a8b434836f037350fb5384e27c171e29c9f534d995d7a579e2d8200c759d","size":1393,"data":"","first_seen":"2025-06-19T23:27:32.085988Z","last_seen":"2026-04-03T17:38:14.221413Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krystan-rose.ck.page/47112975da/index.js","fqdn":"krystan-rose.ck.page","domain":"ck.page","tld":"page"},"ip":{"addr":"104.21.41.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5f4bad9cccd18e76f7964bb7de51f3","sha1":"2c052c149184bcc0518ea98c6a32cdcc8c25dec8","sha256":"956e4b669246218a9e70c229f97f86c0fc2c233991b1eab120fe4bc6265f4695","sha512":"82c4e677b4543d833d640e7682a73252659be4c320dde02efb16304863b20e446a8e89fd8c2d1d3d394b4f7037fa3d57a6beda4ff1fb6a1c8e8de7ca5993da04","ssdeep":"384:7+C268GS2DTanPJhJrJNJIJUJhJCJrJ0J5YJgLJFQOeRtj1AXU6juWn4HSQJDV4D:7+C2MS2HaHHQOeRtjilaHfPCF","tlshash":"94f2a6e932fc6be16813c737a4b600a6725c79b1270207948bec6966b300dfc6459fcb","size":36547,"data":"","first_seen":"2026-03-18T07:26:08.43029Z","last_seen":"2026-04-03T16:55:19.700414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","fqdn":"spwidget-weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f1d5302fffcff6e5f957cdd9d82baf4","sha1":"8f5b1664bce7dbaf01dda9500186132f9f28ce13","sha256":"5f58d8c014d40e6e323f0668a36e463395c9881539fdb618f873319e87e05cff","sha512":"8e2d4e8ee5df0d9caeca1ed90f4e480c8a67691cc893884fa413114498c5b7e7b2ff26047c32322a7cabf95b7eaa1eb805aee1e0c7d9e63437dae9f8b1fd5cba","ssdeep":"","tlshash":"9931758774827e55fae335ecbe0f61493376218a957d8095f253c8a9263cd4e021dbc4","size":1617,"data":"","first_seen":"2025-03-04T15:31:32.210089Z","last_seen":"2026-04-03T17:38:14.223275Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/main.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"926aee99a98b9b6eecaa25bf6611d8ea","sha1":"83cf0446b5258f8cb7167a95d1dd7ea1007a3428","sha256":"ea63f8c4db7496c58701f9975bdf3954e465dd02bb554942d3675599563897fc","sha512":"bed16616ac5615921c1b05bbda5b41d4bc2ca1ad1ef8e3e3294eea4673223639744e8dbae8c0ba27edc8f2ae867df6a08436cc83a0b768acc77d05a4fccec897","ssdeep":"384:hfD0Qnn2cytRT4FoQX5xfaerjW8WBDxz+3h/QyopkeQ938tp/HQSENjluGwwCuDa:ND0Qnn29zUFoQX5xfaerjW8WBDxz+3hK","tlshash":"9b922f857f9f646aa5cbf36a58bf5504c63cd4319102867cbc6e28a43b8085c53adfbc","size":20780,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.640075Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Y26J6BHGJ\u0026cx=c\u0026gtm=4e6411h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12fd038912c538be106d36538dbd318","sha1":"1602cf934bcfb810882c6134716154c547f7f2ea","sha256":"417c11649a1e70828ae07c81d05a88441ace3bbc39ea528ce9f06fc0093dc508","sha512":"d99d2ccb96abe116bd0f4514c8e17c688e0bd92aa3b96cfb8738af3627da7b44bcbd37c9798f785766a02ab090418dcd4bc1e31590ce909fa3e7fc70ec291c2d","ssdeep":"6144:hd3eqQGzLr8DP9EGb/F8x/aGW+/5EiWT6EoK4L8F2t6:BzH8KGbt8U6rO","tlshash":"6bb40aceb3d674265396f478943f01cba97b25e2b49cc8aab089cce01e345964177f78","size":493916,"data":"","first_seen":"2026-04-03T16:55:19.65013Z","last_seen":"2026-04-03T16:55:19.65013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5WDWM2VH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d7ce1bf0481a49bf582c9f8a4cda19e","sha1":"451bace09ad2b976ccde3066881f6747f42a43f1","sha256":"e5accb6808e0538c141df44459e20f7ea14ece9c1135c542422f974666032c04","sha512":"6d7e05079862ade84bbb925c6e4c11efe4ddf3c1f6f7776e48173b5189695a93fc34fad3206ffa3f00812deae0ef39ecc2dde2bcd92d49645ec9d9a344d1396b","ssdeep":"3072:d5SGkP7Wa00eqshTf70fU397PGdlr68/XP9QmEW/biaxax/cwV+/5EiWxp+zUkOz:W3eqQT9N8DP9p/F8x/cW+/5EiWr+zJOz","tlshash":"2974f7cdb7da746243a3a4b8903f114ba13a79d2f84cc894f086d8d42e74a694277f7d","size":339135,"data":"","first_seen":"2026-04-03T16:55:19.669476Z","last_seen":"2026-04-03T17:38:14.216075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A400%2C500%2C700%2C900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css?family=Roboto%3A400%2C500%2C700%2C900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Apr 2026 16:54:31 GMT\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"748fb97200bd280cd29fcd419a792c98","sha1":"154bb2b09fcff9feaf4e2755096a3f335965c97c","sha256":"526cdc412efe9e9da242737150ad12f2eeec5de15505282b876fcc8de54bc4e2","sha512":"1c562dc92321c29e95b34d50f1db61e525e221720ae3f4553cd0e7f8dc06e83831afebe4ef27b4f793d476ae4e74625e082ccf15fc94ce5b82b1589117bf9bf0","ssdeep":"384:q9fa9D9w9k9yf9/qY459L9r9c9fF9Y979/9yE9/qY4O9A9g9m9f79C9F9Z9yO9/4:qMl22YfRiJhan6BBYERNeWwhQHHYORjo","tlshash":"8da20ca10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T12:29:27.256586Z","last_seen":"2026-04-03T19:02:01.03112Z","times_seen":81,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":119,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/quicktags.min.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-includes/js/quicktags.min.js?ver=6.9.4 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 16:59:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"642b05e9-2b7c\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11097)","md5":"c997e04c4b2ff8b71899819957c1e6d4","sha1":"6757186e0cf55300494518d61eb7f9f23d538f84","sha256":"7fc1c384eed2bd0e96a526374f0e116e724f8d9dd160c1260e1a9713df9ff0e0","sha512":"eb573d5700786ba58053f272d0f22920707b24fbb49e384625d44306bd663daa292716515902c1251eeb6756255c1807f466554fde51a834dcac6cd325201131","ssdeep":"192:UcDJEcGHwySyusTIFuAEymRJXbCRq3QH8cVuOT4YFS5EKanyI:LFExusajE1t88cVdhS5EKanyI","tlshash":"da3273f9f2a5313101667593925b021278369974361e29e9f40ccdd3acb894ea23bf7f","first_seen":"2023-04-01T11:00:11Z","last_seen":"2026-04-03T16:55:19.628804Z","times_seen":2354,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r.stripe.com/b","fqdn":"r.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"54.187.159.182","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:37.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stripe.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4E:12:89:06:4D:39:6B:F4:9B:D8:C9:19:66:13:EE:9E:F3:53:3F:62","sha256":"26:7E:20:10:BE:81:CB:76:85:82:92:20:FB:65:34:F3:6F:3C:FB:AE:74:9B:D1:E1:84:C2:9A:42:F8:A6:2D:2A"}}},"request":{"raw":"POST /b HTTP/1.1\r\nHost: r.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1472\r\nOrigin: https://js.stripe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1472,"data":"client_id=stripe-js\u0026num_requests=1\u0026events=%5B%7B%22event_name%22%3A%22elements.metricscontroller.timings%22%2C%22created%22%3A1775235276910%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A%224%22%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Firefox%22%2C%22version%22%3A%2267ff36ff76%22%2C%22event_id%22%3A%2260966161-c74e-4f76-b4fb-0714b7fcbbd0%22%2C%22team_identifier%22%3A%22t_0%22%2C%22deploy_status%22%3A%22main%22%2C%22browserClassification%22%3A%22modern%22%2C%22browser_classification_v2%22%3A%222020%22%2C%22key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22key_mode%22%3A%22live%22%2C%22referrer%22%3A%22https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%22%2C%22stripe_js_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22stripe_obj_id%22%3A%22sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea%22%2C%22controller_load_time%22%3A%221775235275453%22%2C%22stripe_js_release_train%22%3A%22v3%22%2C%22wrapper%22%3A%22unknown%22%2C%22es_module%22%3A%22false%22%2C%22browser_timezone%22%3A%22UTC%22%2C%22react_version_variant%22%3A%22control%22%2C%22deploy_status_time_to_fetch_ms%22%3A%2286%22%2C%22deploy_status_fetch_failed%22%3A%22false%22%2C%22cdn_name%22%3A%22Fastly%22%2C%22cdn_pop_dc%22%3A%22HEL%22%2C%22frame_width%22%3A%221%22%2C%22timeout%22%3A%22false%22%2C%22delta%22%3A%221329%22%2C%22afs%22%3A%22true%22%2C%22isCheckout%22%3A%22false%22%2C%22isGuacamole%22%3A%22false%22%2C%22schema_validation%22%3A%22skipped%22%7D%5D"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://js.stripe.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\nx-stripe-proxy-response: upstream\r\nx-stripe-server-rpc-duration-micros: 2265\r\ncontent-type: text/plain\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.stellar.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/jquery.stellar.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-5af2\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (310)","md5":"6bc994172518faace00197fb53db9378","sha1":"8c993b2cc971b5979ea23fc7e23c98ef1f009cf7","sha256":"cafdc75783c661554df0c541ff661181b5e09ed440acd98cbb03d5e0a78bdea7","sha512":"ec371116fdf6cad811de7f952117162263fb643aec24484fcc607dfca21475e9ab6018e304dccec0b43f41ea241eb708e076b22c79a0b9061eecfa0eb5cb8ebe","ssdeep":"384:BSIkxG7CM8sMijtx0U0/X9Sbt5ajjkZOsEnjyApgBbb8X2xCigNG7hH:BSMCMrM4tx0U0/5jjkZOsApgBbS2xCi1","tlshash":"73a22388b39c242a56af636f8caf13cc613d64314407857fbcbc65e92d9292e5293d74","first_seen":"2023-03-07T01:33:45Z","last_seen":"2026-04-03T16:55:19.629866Z","times_seen":516,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/Untitled-design-24.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Untitled-design-24.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2842539\r\nlast-modified: Thu, 31 Dec 2020 20:19:58 GMT\r\netag: \"5fee326e-2b5fab\"\r\nexpires: Sat, 03 Apr 2027 16:54:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2842539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"ff497afc1197415c7681bfcd49d6bbe5","sha1":"5a6ad61363501ab8444f022f21cd1f6f18c48499","sha256":"54482516a7606c929802136c3f45d6396e74af420a79c2d64e28d5a5a1ca8a99","sha512":"8ad6deba185be6f0a1a23d42114a05fa07ae27dbe33901d8dd05366d2eac28a4adfbba5b7e21a81b68f3fcaf47ef935f7ef416d1f195d3262792a1c16c68d3e4","ssdeep":"24576:EcbZtK3U84cFY3KNmy6Iql0N1AY7Hd7i7q4eJkW5tKE5:Ecbz2NmyAlO1Rbs7dW5t55","tlshash":"a825337faca440a2a42700f7331b9910888255c21e97b9aefc94b5dc5b7fd8ecfb5245","first_seen":"2026-03-18T07:26:08.394002Z","last_seen":"2026-04-03T16:55:19.630423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/.deploy_status_henson.json","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:35.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/.deploy_status_henson.json HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html\r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 274\r\nlast-modified: Fri, 03 Apr 2026 02:50:25 GMT\r\netag: \"a9345dfb689c5cca03a011c69cc90f3b\"\r\ncontent-type: application/json\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 28\r\nx-request-id: aa4737de-2454-4329-97eb-94db3024b457\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 19447\r\naccess-control-allow-origin: *\r\ncache-control: max-age=60\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":474,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a9345dfb689c5cca03a011c69cc90f3b","sha1":"02760547e848890b3700c26cc6e07615eb0763be","sha256":"623d449eb8d421ba35beb5e302112bda4537cba97838cbd6065fed60535f613d","sha512":"2c561d555db1550e2bbd1d8ffe774847fe7f9aa5674969477d84ad06efbd95409cb5bc3b1221989abd52dde4738c5b788bbd842483db1c8e08adda29aaaed04d","ssdeep":"","tlshash":"eff09e70ad1909285fae4c1ab88fc8b4556738423c2c1d5f94a12bddb11072b037320f","first_seen":"2026-04-03T03:04:08.233928Z","last_seen":"2026-04-03T17:17:57.368459Z","times_seen":202,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/customscripts.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/customscripts.js?ver=6.9.4 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1093\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"47e19667ffb842b8f6bed71bbecefe6f","sha1":"9bb5b2c097d7e6ac044711a02f2ab226cb65fc0b","sha256":"28ccf6dabbf4bfed6894858f57800c71aab0ba112a4526e31b82503742904e13","sha512":"93a8400a8d70546e9d33f99b58854300badc4016e9cd97064e8fee24b7bec5d76a15660483ce416e7173ae879ce1c439f7ede237db8e35a1651c98dc7230c274","ssdeep":"48:wcpeMNS9aBY6JsmttiRM7/wLg/ZA3yEkP7MFINLHMtfLdfCgeuFy8mjkFkjMhkd/:rBGlMdcyE89stLdCcmjU0dwL2O5Fk+/Q","tlshash":"ab918149bce121b15077e42aabbf9144fb2aa14fa60a9550749d5d848f1332432efbec","first_seen":"2026-03-18T07:26:08.50238Z","last_seen":"2026-04-03T16:55:19.632106Z","times_seen":2,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/a22b5a1b-826e-49d7-8b32-a362e2a04c4a/0413eba0-10f5-4111-bce5-93b82795f17d/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /consent/a22b5a1b-826e-49d7-8b32-a362e2a04c4a/0413eba0-10f5-4111-bce5-93b82795f17d/consent.js HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Dec 2025 20:57:48 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6ARA4JAGUlQB3ZadH6ZOzxjxYo2aRt2c\r\ncontent-encoding: br\r\ndate: Fri, 03 Apr 2026 15:07:40 GMT\r\netag: W/\"e2e21a0fe862b481fca89004218848ca\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -1JiPs6RGA8B0sjp-eFX0l_U6vz0vAMpK6B0RU_JBYRYhBxLGqf5ow==\r\nage: 6415\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":164833,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64984), with no line terminators","md5":"e2e21a0fe862b481fca89004218848ca","sha1":"82c783e7b0d1764359e6c9090902fb31c9eb95fc","sha256":"5df8c1e1b719d3f3712d869c78cf68bfa5a0a6217602e9d7c300e7237ab9f665","sha512":"cb943c83588889bee89f84a6440b750533f317f2aa215e879765c31dc348f66c3b35e033571a099922f6d893ba9d19d332178aa4ba423d15d596805dc7c4d0cd","ssdeep":"3072:SvPJGNbvFgH+cPEqUqVzScOZgNjiltXxVs:MP0bKPEqjhBAxVs","tlshash":"4ef36cad73a9712c9e98098d3cfda529f9681c46b4108c3c97cc1c8531f7e9a27e476e","first_seen":"2025-12-19T04:32:06.848512Z","last_seen":"2026-04-03T17:38:14.163296Z","times_seen":20,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":48,"dns":38,"connect":1,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/stripe-cookies-28d0c3a5a6dfa738496e3527f2037989.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:35.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/fingerprinted/js/stripe-cookies-28d0c3a5a6dfa738496e3527f2037989.js HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13872\r\nlast-modified: Tue, 03 Feb 2026 19:57:01 GMT\r\netag: \"a7f92037d53dcd82afca416ced1ed849\"\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 2556424\r\nx-request-id: 5410317c-2ffb-4c16-825c-e50a9a91ad9c\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 110301\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":66119,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7f92037d53dcd82afca416ced1ed849","sha1":"d39e0b1c90116ebb3149eeafac2cacdc3e3978e7","sha256":"5dd1b51600de4f2f723a3ab5517562ab6fd55283e8ac465822a00a7d08550c28","sha512":"113f50c35362c3dab35b3b890293c02232a79f3e6bc64e5a5f5dd564f0fcd9d26dbec5ce96f02d81be8bfb13ea0b988bd7291a01879c7bcc98b8bc4216ab5da7","ssdeep":"768:PoCY1v+AbOiw++ddCRCBA/j9hu+aq7C2D4KamMpssXHQnhG9RP:Pqvfaq7z3UHmG9RP","tlshash":"3c53ead8319fb8d552a60128a04f3e4df3796200f969ccd89617eca12d6de3e5131eee","first_seen":"2026-02-03T21:01:13.057049Z","last_seen":"2026-04-03T19:08:49.918266Z","times_seen":10531,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/animate.css?ver=1.0","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/animate.css?ver=1.0 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-11498\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70808,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9b01508c4038b9fbeafa9676ab7d8b62","sha1":"9cc2b3b9d0f376328cc32b80e486850a2964c27c","sha256":"c065a79be7511e259631f7f99f4191ad98befcfcc2f739cb2c18e39f11c48272","sha512":"0f0aedff6c56c34f96cab40dca9bf47dd1345dd701575ab432e6ce8de8ba1152179a3c8470dc2230432852beca751ac2df918116e387d831d87714edc5183eda","ssdeep":"384:x/HuaubH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVrib:ZHuauqfqftulucfwfk+1fHf7SpS/fjfp","tlshash":"be631f6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-04-03T16:55:19.634576Z","times_seen":313,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Archivo+Narrow%7CArimo%7CBerkshire+Swash%7CBitter%7CComfortaa%7CDancing+Script%7CDosis%7CDroid+Serif%7CFrancois+One%7CGermania+One%7CHammersmith+One%7CIndie+Flower%7CLobster%7CMuli%7CNosifer%7CPT+Sans%7CPT+Sans+Caption%7CPT+Sans+Narrow%7CPacifico%7CQuestrial%7CRoboto+Mono%7CRoboto+Slab%7CSource+Serif+Pro%7CTitillium+Web%7CWork+Sans%7CRubik%3A700i\u0026ver=6.9.4","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css?family=Archivo+Narrow%7CArimo%7CBerkshire+Swash%7CBitter%7CComfortaa%7CDancing+Script%7CDosis%7CDroid+Serif%7CFrancois+One%7CGermania+One%7CHammersmith+One%7CIndie+Flower%7CLobster%7CMuli%7CNosifer%7CPT+Sans%7CPT+Sans+Caption%7CPT+Sans+Narrow%7CPacifico%7CQuestrial%7CRoboto+Mono%7CRoboto+Slab%7CSource+Serif+Pro%7CTitillium+Web%7CWork+Sans%7CRubik%3A700i\u0026ver=6.9.4 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Apr 2026 16:54:31 GMT\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37188,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"2682c815b8748b93c4da7e3461ad3af3","sha1":"20cafefa7ff5def28452d7ae7010eb42e8c0f754","sha256":"5ace78d2a648c480f55295eef2429518e3904576f17b927662d795f084f2f085","sha512":"c6986c26cddad8f04811fdd24294a953a379182a6b2086592c077c5fd7e0c31d94996b98dc0def1042f12baf362c3381eed7a7250d562418dff87ec829332437","ssdeep":"384:cuwY39UeTNlzyxHt22YCOS6MoLMipG0+EVnHVcVi6V4VsVhRWa9I/h1RhlkSsdLa:aOSKVHVcVVV4VsVhga9eh1hCA","tlshash":"34f22f91442be400ab931cc623cf7e32de4e62557045d43aaffe2c98eca6d365361b5e","first_seen":"2025-10-11T05:34:29.760032Z","last_seen":"2026-04-03T16:55:19.635084Z","times_seen":17,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":153,"dns":1,"connect":23,"send":0,"wait":34,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/slider.js?ver=1.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/slider.js?ver=1.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-67e\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c8c8698c9882efcee263198a6aaa0b59","sha1":"b3d392f95629e7ab5c3d53b5249f1c13cc58b208","sha256":"18f00ce551f1f95e667475ffd05df1149b359b9a38b9981a6c9c5aafb2cc23e9","sha512":"91c2c209e030afe67f8b009da34a3ac2fda60ea61a9ec18426d521de4deed6310327b497cf0141228060f4ce2e9ed1154a4df593de79422cc9171a35bf573048","ssdeep":"","tlshash":"91316d18fbd8257c693b2bd5397ad84ef2b34c011707ca12e869817c29d09954693fb9","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.635642Z","times_seen":18,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/Untitled-design-20.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Untitled-design-20.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1812522\r\nlast-modified: Wed, 30 Dec 2020 20:49:00 GMT\r\netag: \"5fece7bc-1ba82a\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1812522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"5acbac79b0c433587f6a7a72d3bcade0","sha1":"4a811f6b0019299312eb1f73550221c42a57d3f0","sha256":"d6a0a4b9b59902f80d7b5b0e5ebb3cc69cf6193b6a64f7d68d5dd0e225c864e8","sha512":"932ea4cb431a39dffc5e6cfcfb7355bef70ed0a00d6a7693f4de8bb9363f275842bf67853d45a32b341d1d785f091e0aa3d79a3c8450faaf80f6ddb17611508f","ssdeep":"24576:GM64BxWD7X83GJKCSXYKccGgDJXZ3gIqTZXIqCyh:yuxWDz83egNsTyqCs","tlshash":"ee2533a55caebf39dee678558e4be2a424deaddd3431c2541046c28d2cde7c3830876b","first_seen":"2026-03-18T07:26:08.470193Z","last_seen":"2026-04-03T16:55:19.636416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":1436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_preferences","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"POST /save_preferences HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\ncontent-type: application/json\r\nContent-Length: 791\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":791,"data":"{\"userIdentifier\":\"a22b5a1b-826e-49d7-8b32-a362e2a04c4a.678f108b-b15e-4652-8ae5-f0d07c018cca\",\"consentPreferences\":{\"cookieOptions\":[{\"gtm_key\":\"dg-category-essential\",\"isEnabled\":true},{\"gtm_key\":\"dg-category-functional\",\"isEnabled\":false},{\"gtm_key\":\"dg-category-performance\",\"isEnabled\":false},{\"gtm_key\":\"dg-category-marketing\",\"isEnabled\":false}],\"isCustomised\":true},\"customer\":\"a22b5a1b-826e-49d7-8b32-a362e2a04c4a\",\"consentMode\":\"optout\",\"revision\":\"976efc9a-7fdd-4b33-83d9-78a9fcb0556c\",\"currentPage\":\"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176\",\"buttonLabel\":\"DNT\",\"policyName\":\"Global Privacy Rights\",\"defaultPolicy\":true,\"localeCode\":\"\",\"cookies\":[\"tracking_enabled\"],\"gtmConfigCheck\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: CloudFront\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\naccess-control-allow-origin: *\r\naccess-control-request-method: POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6TewwuXPWt2J7bDuRPMbjbFsQ5SmjClQgKFCiM3-1or-nYiPnX68eA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3ac0ef88b7c21b828cfbd896952283c","sha1":"fe7af8095a1dc748a3bd25582159687a901c6bb3","sha256":"617f7515100f8a419ee293ae56945333a435d78ac67adf9e3ef5dc2103cff8b2","sha512":"e5c899358056552f7fab374f2a4da27462b6f84ba67e38b538298b08e03d40c0fbdba5c33468af98703563ce66ba687b4f274105c8b6b6d4066d216a785548fb","ssdeep":"","tlshash":"91600000c03c03f3ccc03c0003030c003f300c00300f00c0030cc030c0000c3c000000","first_seen":"2024-06-29T16:39:46Z","last_seen":"2026-04-03T19:38:01.106061Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.com/6","fqdn":"m.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.13.226.163","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.stripe.network/inner.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-04-03T16:54:36.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"m.stripe.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 22 Feb 2026 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:44:E4:B6:73:69:52:E1:D7:4D:52:10:E1:37:5A:B4:80:C4:89:4D","sha256":"FC:D7:89:9D:71:A3:4A:8F:FF:E0:AB:F3:0F:7C:1A:5C:D8:37:C7:F3:22:D7:8A:77:54:D2:48:A3:F4:5E:F1:2C"}}},"request":{"raw":"POST /6 HTTP/1.1\r\nHost: m.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3756\r\nOrigin: https://m.stripe.network\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.stripe.network/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3756,"data":"JTdCJTIydjIlMjIlM0ExJTJDJTIyaWQlMjIlM0ElMjJhZDRiZDY2MThlMTc0NzU0MWQwNzZjNzFiMGIxMDQ2NyUyMiUyQyUyMnQlMjIlM0EzNjQlMkMlMjJ0YWclMjIlM0ElMjIlMjRucG1fcGFja2FnZV92ZXJzaW9uJTIyJTJDJTIyc3JjJTIyJTNBJTIyanMlMjIlMkMlMjJhJTIyJTNBJTdCJTIyYSUyMiUzQSU3QiUyMnYlMjIlM0ElMjJ0cnVlJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJiJTIyJTNBJTdCJTIydiUyMiUzQSUyMnRydWUlMjIlMkMlMjJ0JTIyJTNBMCU3RCUyQyUyMmMlMjIlM0ElN0IlMjJ2JTIyJTNBJTIyZW4tVVMlMkNlbiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZCUyMiUzQSU3QiUyMnYlMjIlM0ElMjJXaW4zMiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZSUyMiUzQSU3QiUyMnYlMjIlM0ElMjJQREYlMjBWaWV3ZXIlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTJDJTIwQ2hyb21lJTIwUERGJTIwVmlld2VyJTJDaW50ZXJuYWwtcGRmLXZpZXdlciUyQ2FwcGxpY2F0aW9uJTJGcGRmJTJDcGRmJTJCJTJCdGV4dCUyRnBkZiUyQ3BkZiUyQyUyMENocm9taXVtJTIwUERGJTIwVmlld2VyJTJDaW50ZXJuYWwtcGRmLXZpZXdlciUyQ2FwcGxpY2F0aW9uJTJGcGRmJTJDcGRmJTJCJTJCdGV4dCUyRnBkZiUyQ3BkZiUyQyUyME1pY3Jvc29mdCUyMEVkZ2UlMjBQREYlMjBWaWV3ZXIlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTJDJTIwV2ViS2l0JTIwYnVpbHQtaW4lMjBQREYlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJmJTIyJTNBJTdCJTIydiUyMiUzQSUyMjEyODB3XzEwMjRoXzI0ZF8xciUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZyUyMiUzQSU3QiUyMnYlMjIlM0ElMjIwJTIyJTJDJTIydCUyMiUzQTElN0QlMkMlMjJoJTIyJTNBJTdCJTIydiUyMiUzQSUyMmZhbHNlJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJpJTIyJTNBJTdCJTIydiUyMiUzQSUyMnNlc3Npb25TdG9yYWdlLWVuYWJsZWQlMkMlMjBsb2NhbFN0b3JhZ2UtZW5hYmxlZCUyMiUyQyUyMnQlMjIlM0ExJTdEJTJDJTIyaiUyMiUzQSU3QiUyMnYlMjIlM0ElMjIwMDAwMDAwMDAwMTAwMDExMDAwMDEwMDAxMDAwMDAwMDAwMDAwMDAwMDExMDAwMDAwMDEwMDAwJTIyJTJDJTIydCUyMiUzQTM2MCUyQyUyMmF0JTIyJTNBNjAlN0QlMkMlMjJrJTIyJTNBJTdCJTIydiUyMiUzQSUyMiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIybCUyMiUzQSU3QiUyMnYlMjIlM0ElMjJNb3ppbGxhJTJGNS4wJTIwKFdpbmRvd3MlMjBOVCUyMDEwLjAlM0IlMjBXaW42NCUzQiUyMHg2NCUzQiUyMHJ2JTNBMTM0LjApJTIwR2Vja28lMkYyMDEwMDEwMSUyMEZpcmVmb3glMkYxMzQuMCUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIybSUyMiUzQSU3QiUyMnYlMjIlM0ElMjIlMjIlMkMlMjJ0JTIyJTNBMCU3RCUyQyUyMm4lMjIlM0ElN0IlMjJ2JTIyJTNBJTIyZmFsc2UlMjIlMkMlMjJ0JTIyJTNBMzAxJTJDJTIyYXQlMjIlM0EzJTdEJTJDJTIybyUyMiUzQSU3QiUyMnYlMjIlM0ElMjI5YzE5YTBiNTk5NDVjNWI4ZGZkNWE4N2EwMjZkMTgxNSUyMiUyQyUyMnQlMjIlM0EyNzQlN0QlN0QlMkMlMjJiJTIyJTNBJTdCJTIyYSUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGWF92V09wWVF3MnlpbVB6YTJsZGlsc3NaMVZnbEFoNlYzaHhrVFRja20xNC5xSHZqUC1kVm1KNXJtUkc0aEpHMlRXcVpmS3ZuaThzZ2FvNmhxZDhLTmZNLmcydTktaHFadkdJcVlKY1BsUGZ3SkFmLXYzUmd5S194MU5wcHpBbEExMk0lMkYlMjIlMkMlMjJiJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkY5MTRLM0tOd3ExUmx6SzhKWTVCdGpzaDhsbmNWRmNXZnBfV2pOemVTd21vLlBBbmVnalFJRllKeGJ1OVJVRHdZT1E2VHE4bmxOWHBwYm9ZejFKOWZqODAueDJ1NTd0SkpQVWJHUGtjdVhvel9Ia1VILU1Da2o0UWtUc3dvbGdQLXRHZyUyRmo1Tlo2VUEwZDdaekJ0dGZhWURsZ0FuM291LTVYdjU3SW1oUWMzZHlueDglMkZpdEkwbURsUHJ3SzJJZUg3UFY0anBpZ0NvUnIyazZNYTlDeWxfRnpwOWE4JTNGbE5HQXFGT1NNNmpTWFNXa0hVN0pMOEVld1c3M3RIbkhVTkNxOHlMdDE4byUzRENZOGMwdlh4dzJjVUJ4eUxKUXJhVGdxYjBjSm5lVXd4RUd2TUxkd1BCWm8lMjZxTURBalFtbEV1VVhUb3lmamZmYnY1UHVjcE1VZ2JNSjYyWnZvS2pJdkFjJTNEQUI0T1UxVENadkJYX3RtbWd3RklBdkh6RHVraVdrRUw5U1Nfc0JHRy1JRSUyMiUyQyUyMmMlMjIlM0ElMjJYcHpfaDBDem1WckdYQWEtd2NHSlFxeFBHdHpPaTVqYmZXZkRCcGJUbjNFJTIyJTJDJTIyZCUyMiUzQSUyMk5BJTIyJTJDJTIyZSUyMiUzQSUyMk5BJTIyJTJDJTIyZiUyMiUzQWZhbHNlJTJDJTIyZyUyMiUzQXRydWUlMkMlMjJoJTIyJTNBdHJ1ZSUyQyUyMmklMjIlM0ElNUIlMjJsb2NhdGlvbiUyMiU1RCUyQyUyMmolMjIlM0ElNUIlNUQlMkMlMjJuJTIyJTNBMTE2JTJDJTIydSUyMiUzQSUyMnNwd2lkZ2V0LXdlaW5zdGVpbi1jb3Vuc2VsaW5nLmNsaWVudHNlY3VyZS5tZSUyMiUyQyUyMnYlMjIlM0ElMjJ3d3cud2VpbnN0ZWluY291bnNlbGluZy5jb20lMjIlMkMlMjJ3JTIyJTNBJTIyMTc3NTIzNTI3NjE4MSUzQTBhMzM4Zjk5NmVkN2FjMDRiYmZlZGVkYTg1NWE0N2I5Y2NlYzVhZmNhNTI2NzkwNzYzMjFlMjMwOGE1ZWUwMzYlMjIlN0QlMkMlMjJoJTIyJTNBJTIyYjY2OTg2NDQ2YWE5ZDRlMzMxNTklMjIlN0Q="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:36 GMT\r\ncontent-length: 156\r\nset-cookie: m=345f4d63-b169-4e14-911f-3d1b65250f97c86b4a;Expires=Sun, 02-Apr-2028 16:54:36 GMT;Secure;HttpOnly; SameSite=None\r\nx-content-type-options: nosniff\r\nx-stripe-proxy-response: upstream\r\nx-stripe-server-rpc-duration-micros: 2808\r\naccess-control-allow-origin: https://m.stripe.network\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\ncontent-type: application/json;charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd4f7bd6ddac013d7c0576370d79909e","sha1":"751ac9e6664acfa3b15ef53c65133e3717e69973","sha256":"5e4f3ec47a11021ef1f111bb5632e4f1c8c1c667e8de9bb731869c4f09f138c6","sha512":"85c3314b24585f311d76a245cb0c9013fde1acf6507f2458d6fc5a18d2a13ea03fb1f7d7dc1a3873a25b27f5191cee7db2ad65e87da9a29c205fc8254771a6d1","ssdeep":"","tlshash":"28c08c94aa72942a26a3c21209213eab45cab02dede22adcc842a005e70e40ba48c200","first_seen":"2026-04-03T16:55:19.63774Z","last_seen":"2026-04-03T16:55:19.63774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1204,"timings":{"blocked":514,"dns":1,"connect":169,"send":0,"wait":173,"receive":0,"ssl":344},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/SmoothScroll.js?ver=20160809","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/SmoothScroll.js?ver=20160809 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-504b\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"26dbb7e7de82d867836d44aa48106d1b","sha1":"79ce0664855f69f309ceaa96bf22200f3143dbc5","sha256":"b4ff222f0ef701c8f9bbd9509e19b1094195604c8d2a3f319bf947642090b7b8","sha512":"a537db7790e7d03c70770d9764a6d24024d6ec9f7679945a755ac0f6e01b2b1bcd13dcbd5a58e220d518f719063ed9dfd1474b700a58221cb79c48dc3e520d19","ssdeep":"384:zhtB3DPRPBZt034JMaXH78yoVzPRfBAGd2FuV4FNy4CFRWz6K:z7Bdt0wb8yoVtBNg7FENszf","tlshash":"5a92c49556e32c62166b613e976fa2c633740043110aed25380dbfd82f8cb7453f6eea","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.638505Z","times_seen":42,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.convertkit.com/forms/1921418/visit","fqdn":"app.convertkit.com","domain":"convertkit.com","tld":"com"},"ip":{"addr":"3.143.37.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:35.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.convertkit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:9B:67:1D:59:0F:29:4E:12:BA:49:69:7E:A6:E8:38:15:20:FE:D5","sha256":"B4:40:A5:8F:A8:1F:CF:45:70:08:34:9F:58:C8:C2:65:77:B6:CC:89:53:88:9A:20:82:1B:AF:93:FC:B9:D1:1E"}}},"request":{"raw":"POST /forms/1921418/visit HTTP/1.1\r\nHost: app.convertkit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.weinsteincounseling.com/\r\nContent-Type: application/json\r\nX-CKJS-Version: 6\r\nContent-Length: 130\r\nOrigin: https://www.weinsteincounseling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"host\":\"https://www.weinsteincounseling.com/\",\"referrer\":\"\",\"search\":\"\",\"token\":\"\",\"user\":\"3a2adc52-d673-409f-b91d-0522388c1aab\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 7\r\nserver: nginx\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\netag: W/\"aee408847d35e44e99430f0979c3357b\"\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-security-policy: report-uri /csp-violations; default-src 'self'; base-uri 'self'; font-src * data:; img-src * blob: data: webkit-fake-url:; object-src 'none'; media-src * blob: data:; form-action *; script-src 'self' https://*.kit.com https://*.convertkit.com https://*.stripe.com https://*.intercom.io https://kit.fontawesome.com https://challenges.cloudflare.com 'strict-dynamic' 'report-sample' 'unsafe-eval' 'nonce-zhjdqqqTqPKLLUeRYZ40zA=='; style-src 'self' https: 'unsafe-inline'; connect-src * https://challenges.cloudflare.com; frame-src * https://challenges.cloudflare.com; child-src * blob:; worker-src 'self' blob:\r\nx-request-id: ed6c1d36-80b4-4426-9ef0-f1a992019fe7\r\nx-runtime: 0.012444\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-04-03T19:12:27.471115Z","times_seen":32306,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/main.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/main.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-512c\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20780,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"926aee99a98b9b6eecaa25bf6611d8ea","sha1":"83cf0446b5258f8cb7167a95d1dd7ea1007a3428","sha256":"ea63f8c4db7496c58701f9975bdf3954e465dd02bb554942d3675599563897fc","sha512":"bed16616ac5615921c1b05bbda5b41d4bc2ca1ad1ef8e3e3294eea4673223639744e8dbae8c0ba27edc8f2ae867df6a08436cc83a0b768acc77d05a4fccec897","ssdeep":"384:hfD0Qnn2cytRT4FoQX5xfaerjW8WBDxz+3h/QyopkeQ938tp/HQSENjluGwwCuDa:ND0Qnn29zUFoQX5xfaerjW8WBDxz+3hK","tlshash":"9b922f857f9f646aa5cbf36a58bf5504c63cd4319102867cbc6e28a43b8085c53adfbc","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.640075Z","times_seen":5,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v4.7.0/fonts/fontawesome-webfont.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 03:44:58 GMT","end":"Sun, 24 May 2026 04:44:53 GMT"},"fingerprint":{"sha1":"0C:5A:E2:01:10:8C:15:2B:47:73:4B:2D:0B:04:A9:CB:C4:D5:87:DE","sha256":"8A:BA:58:86:7D:78:23:12:27:76:D9:DA:25:26:4E:8B:3B:98:BF:CB:D1:33:A9:B0:4F:4C:17:B3:6C:58:38:24"}}},"request":{"raw":"GET /releases/v4.7.0/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.weinsteincounseling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:32 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"af7ae505a9eed503f8b8e6982036873e\"\r\nlast-modified: Fri, 22 Sep 2023 01:44:05 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNRp6ozdU65HPnm1hyI7AoP8yXPA2CQ9pNebQvpa0GCNgNCP99q36asJjE1Kyy42aNQV7KpVgYWpvRgvC1qwq0rtc9WMJ1fLAkvdU1qPIi3SJZ23aPpceylNfJH5au1QblLGetM4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncf-ray: 9e69988269c0712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-03T19:26:29.323772Z","times_seen":409778,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/vendor.862c94c871251aa2627dc671594575b6.css","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/vendor.862c94c871251aa2627dc671594575b6.css HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4618\r\ndate: Wed, 26 Nov 2025 13:08:10 GMT\r\nlast-modified: Wed, 26 Nov 2025 13:07:53 GMT\r\netag: \"36dda00e0840be79da75ccec4cf4449b\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\ncontent-encoding: gzip\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: LspUj6jxzXgDwVzmn8g52S4eGwtIFKSpNuqAllE0y9M72jDBa33eWQ==\r\nage: 11072785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28757,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28680)","md5":"862c94c871251aa2627dc671594575b6","sha1":"4c02c25d369150c85f55edde9b1c50257e10dac5","sha256":"d46f1066faace713b9ac07fd0dd7d02da75875246759c786fcc691e51cd8c7f0","sha512":"7dcd335199913ad07ec309ebf64a0d283ed846e9432fe8edbd16e9e9de52f45c5bd1ac567a18ecd0eb7680e256be960d281fa4cec8e2f5f91471718ab54dbbf2","ssdeep":"192:FdTHzBNEx/ORsyJXC/Afi5owmXIvTNBxwxS7kv3LaRkEy8DBN8VSvSBfUf4a:FBzB+x/ORrC4fi5owmXWGS7c3LaRku","tlshash":"34d2762c7701105da2268f19cfc59f286329c9835e4358ee32a09d06e3aeafc365f757","first_seen":"2025-12-03T01:21:59.117327Z","last_seen":"2026-04-03T17:38:14.192136Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/shared-c7623aaa578cac8c91cb14c7dbeea7d8.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:35.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/fingerprinted/js/shared-c7623aaa578cac8c91cb14c7dbeea7d8.js HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 187763\r\nlast-modified: Fri, 03 Apr 2026 01:59:53 GMT\r\netag: \"c3d83b7dabc48a5a17c8069a52ea34e6\"\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 53115\r\nx-request-id: a236c805-f0e1-46c4-a961-373deb5bccbb\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 3950\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":885328,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"c3d83b7dabc48a5a17c8069a52ea34e6","sha1":"e0d58c2e22f83c6a578720c9a33641a3d803c987","sha256":"abd292570ad7be2cb37a6a8b2546d1dc4e0d0ed4efb5513ae3901a3530f7302b","sha512":"b6261bdee6cbb3e4de604ec79d53d94feb0c080b2d90e3786e89df539d26032ca9233761bc9c0b561030388a29a1fe91010d8430646ff70aea61e0403db51cf1","ssdeep":"12288:GYzIHL6R7ADWb9tEpDPYEUDSzN4vya3JZju4KSUp0VSymMqFr/7UjpAGm0qhwiAy:GYzIr67UM9t/DRvya3tiAy","tlshash":"77153b8e75da755607c711e4e07f2d0ef33910949a881840d8f0c9ee2dbeea5e13bb69","first_seen":"2026-04-03T03:04:08.355928Z","last_seen":"2026-04-03T17:27:06.326784Z","times_seen":108,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/18a9c36ed1.js","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 03:44:58 GMT","end":"Sun, 24 May 2026 04:44:53 GMT"},"fingerprint":{"sha1":"0C:5A:E2:01:10:8C:15:2B:47:73:4B:2D:0B:04:A9:CB:C4:D5:87:DE","sha256":"8A:BA:58:86:7D:78:23:12:27:76:D9:DA:25:26:4E:8B:3B:98:BF:CB:D1:33:A9:B0:4F:4C:17:B3:6C:58:38:24"}}},"request":{"raw":"GET /18a9c36ed1.js HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdxPXnbuHAp3PFkk%2F7LQDPhc28%2B5RH%2Bu0SutyBFHK3XC32JrVLyDcLfLGCTt1huYq0gaMK05F7TI9RDFcSQi%2FDQZhuz8eRS5LARj2%2FDbl33QGM7%2FcfvEdtlIkWeAPxAbVWrpyni2\"}]}\r\ncf-cache-status: HIT\r\ncache-control: max-age=1800\r\nage: 1674\r\nlast-modified: Fri, 22 Sep 2023 00:19:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\netag: W/\"2c8ad70895554a9787ba0c6d0e82243f\"\r\ncontent-encoding: br\r\ncf-ray: 9e69987f9e53712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9239)","md5":"2c8ad70895554a9787ba0c6d0e82243f","sha1":"fbb7caa3f030769490ca0529c97690d55ee6b819","sha256":"ccde569e327cb3980aec6e409bb66bd407941d4b9922db8d65fe01fb036a5d76","sha512":"bff43e20b8919e531eaa449e248924a016c9c42630f3c35438967e71fa9b503d523277d3ee606b300bd34ac2dda98eadf244ad1279e6e8e4ddcae2c10116b8cf","ssdeep":"96:t1p+BJu9lqR2xyP3i+MxDJwqs4QO5l64Zhid1zEyDJ4FqsG/Kn+JP6nUsj1Y7GP/:gSlqIuIQqirlING/K+JYlPmq6NGAjRMV","tlshash":"9a12a46d3625727e92637172a1bf634f71325066f805486060acdce47d38ea9123ffb9","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.642789Z","times_seen":31,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Apr 2026 16:54:31 GMT\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15630,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fec2780b9be7386f51bea60d5c19de6d","sha1":"932d1e02a18bd4370a708b3c7d9adafb8c74db24","sha256":"b20dcaab3e685681160d36b3da511b4a47d61158224d2b306b2252ba881cc2cd","sha512":"ae2f0bcced3cd1397ea8f321f1b3cfef8acc23f82a9ed110763bea522e47fe9c1d10418f17ce78ab67bf141d9ccb2d30739d595f25dde8a6c142689669b7f717","ssdeep":"192:H3pG3pNo3prA6LA6+oA6jn6zn6mon6bOROmoOnN6AN6roN64r6Fr6Eor6QpspOlX:H3w3s3VR9xqWSUq+DnL0ARmkX","tlshash":"6f627991087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad9bc654371b2d","first_seen":"2026-03-18T07:26:08.491881Z","last_seen":"2026-04-03T16:55:19.643915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":165,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2021/01/4P5A3862-1-scaled.jpg","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/4P5A3862-1-scaled.jpg HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 514376\r\nlast-modified: Wed, 06 Jan 2021 21:33:14 GMT\r\netag: \"5ff62c9a-7d948\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":514376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 2317x2560, components 3","md5":"8eb2a50b3ca08c0fb84f415e7d07c082","sha1":"43f4b53a5007cf470394c659cba4c41a65570c07","sha256":"21d718bdb24795a9f707d65146be5100d1094b51b229620ee9f464ed63991655","sha512":"dca66627dc92786848cd8e3cf13ac5f404759ef6a39b40e575fcd3638d4cf4423b24dd19c6fa5843626327a8e6b16c629454f45b75795197df45979e0580dfc3","ssdeep":"12288:ZNQb9vLZtyiyV5mYmUkKqLz+TYqzomogmAuF:kdoXrTYCFg","tlshash":"8ab4231981d1409c73efbd26d2ef9197da380b3f853c6a39285e9340661f8e8c1a579f","first_seen":"2026-03-18T07:26:08.483869Z","last_seen":"2026-04-03T16:55:19.645501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":862,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 03:44:58 GMT","end":"Sun, 24 May 2026 04:44:53 GMT"},"fingerprint":{"sha1":"0C:5A:E2:01:10:8C:15:2B:47:73:4B:2D:0B:04:A9:CB:C4:D5:87:DE","sha256":"8A:BA:58:86:7D:78:23:12:27:76:D9:DA:25:26:4E:8B:3B:98:BF:CB:D1:33:A9:B0:4F:4C:17:B3:6C:58:38:24"}}},"request":{"raw":"GET /releases/v4.7.0/css/font-awesome-css.min.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/18a9c36ed1.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TD%2BXY7fE6GD4cyIt5TfQueKSIVR%2FmP40j%2BTL%2FZjO2u78RpPAOboDNsT5sVP0F64n34Jwpm9BIfuq6OiAVa2dZpeXnzajXDtnmEbB7ERv8R8huc27bpZwx6fqK1XD07iSANtdW8V\"}]}\r\ncf-cache-status: HIT\r\ncache-control: max-age=31556926\r\nage: 1161121\r\nlast-modified: Fri, 22 Sep 2023 01:44:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\netag: W/\"36082410df2ef7f83932219089dc1443\"\r\ncontent-encoding: br\r\ncf-ray: 9e699880cfb3712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30343)","md5":"36082410df2ef7f83932219089dc1443","sha1":"7961402d7d01e19387fe609a38454b0bc8c6cca4","sha256":"5b9573e1023da775390e9284ec0eb1c606df9b468a28980055b4a6aa804f4350","sha512":"806ff5b14991e42523541d89a18eb295c4bc3dd7c7e9895068ef083a898dbe928d3852638cf106d0a646617e773ca2084b439659b41b3125b7e4fca1d2d81fb1","ssdeep":"384:bu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:klr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"ead231f8e54c01d66731c48bef81b36862b6fb3dc5854ca9f01f690c29d226552c6fba","first_seen":"2023-04-05T12:17:13Z","last_seen":"2026-04-03T19:39:17.091532Z","times_seen":14362,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/vendor.362e41e7fcb9e690070f0ff993d94548.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/vendor.362e41e7fcb9e690070f0ff993d94548.js HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 12 May 2025 11:49:29 GMT\r\nlast-modified: Mon, 12 May 2025 11:49:06 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nserver: AmazonS3\r\netag: W/\"362e41e7fcb9e690070f0ff993d94548\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Dlgh982sqQ0tF2-37DGZkX1S6kzdWbYZZNlI2k60FKpWQj5mH3zBRg==\r\nage: 28184706\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":710592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60756)","md5":"362e41e7fcb9e690070f0ff993d94548","sha1":"174247edd1d1649241e21d821832669cb7a6835d","sha256":"c1bc0fc54ee25ba949cf0bdd0e3287a8ad0fb650b98b8fb0b6821966b2be89d4","sha512":"24b84706bb4d1a429d7e3936a1324936b0377e9df592bf8ae0007531a9da7856464a47400b937e02c17fd7ae9dc10662a223e8cfe7c5face012c41a7c5e1ba0f","ssdeep":"6144:/SA0hRZ2hBbkdCPaqDs2m9t9My17ESUJiNRbxX6m3F3PyHWCCdnDbybNBRFey4te:N0PZ2hBbSCP1PmNp17ESUfGQW2Zbx7","tlshash":"5ae42a997392b4a143e361a9403f0103f23a2959680dd058f365e8eb7cbdd8d617bf7a","first_seen":"2025-06-19T23:27:31.993328Z","last_seen":"2026-04-03T17:38:14.218929Z","times_seen":52,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/bootstrap.min.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/bootstrap.min.js HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-8c6f\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T19:30:08.741476Z","times_seen":8584,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.psychologytoday.com/api/verified-seal/seals/17/profile/838726?callback=sxcallback","fqdn":"www.psychologytoday.com","domain":"psychologytoday.com","tld":"com"},"ip":{"addr":"99.81.180.75","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.psychologytoday.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:A0:2F:C3:05:A2:C6:27:6C:02:71:31:1A:E0:C4:42:D7:B9:D5:EC","sha256":"59:54:AB:26:64:29:D8:7A:A0:C2:64:60:17:5B:2F:94:B8:FC:94:4D:4B:54:47:9F:75:D2:93:7B:3A:82:5F:B5"}}},"request":{"raw":"GET /api/verified-seal/seals/17/profile/838726?callback=sxcallback HTTP/1.1\r\nHost: www.psychologytoday.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: Apache/2.4.61 (Amazon)\r\nx-powered-by: PHP/7.0.33\r\nvia: 1.1 ZZ\r\nx-country-code: NO\r\nx-region-code: 03\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.0.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (22171), with no line terminators","md5":"4982803470b25cb2280b7891ec0b678e","sha1":"6cb86776bf966e6c476d6ef856d0f73e2c72262b","sha256":"ab7f17c1deafcdd8c4ab0138b43dad43a96eb418f4151a40700d7a4ccd4daaa7","sha512":"01bc7e43038580a5e6245f6580ee02a75085c6073db06cf847be32589a827a301118d2c2f5631bbe74ce0bdc6ad23e955df94d1fad503c5f1282d51a6c45f027","ssdeep":"384:kPBgwBUQPh2alwfUZwDdY1KauGks4QPh2alwfUnaCoMSbrelkrw69:/CJh25c7KauYFh25caB9","tlshash":"cba2c4575d0fa7965c103ef746ea39463848f0418aa3e7c4f2b55afc866f3885cc029c","first_seen":"2026-03-18T07:26:08.374272Z","last_seen":"2026-04-03T16:55:19.648696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1538,"timings":{"blocked":627,"dns":21,"connect":54,"send":0,"wait":321,"receive":0,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Y26J6BHGJ\u0026cx=c\u0026gtm=4e6411h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:33.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=G-0Y26J6BHGJ\u0026cx=c\u0026gtm=4e6411h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\nexpires: Fri, 03 Apr 2026 16:54:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161680\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493916,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"b12fd038912c538be106d36538dbd318","sha1":"1602cf934bcfb810882c6134716154c547f7f2ea","sha256":"417c11649a1e70828ae07c81d05a88441ace3bbc39ea528ce9f06fc0093dc508","sha512":"d99d2ccb96abe116bd0f4514c8e17c688e0bd92aa3b96cfb8738af3627da7b44bcbd37c9798f785766a02ab090418dcd4bc1e31590ce909fa3e7fc70ec291c2d","ssdeep":"6144:hd3eqQGzLr8DP9EGb/F8x/aGW+/5EiWT6EoK4L8F2t6:BzH8KGbt8U6rO","tlshash":"6bb40aceb3d674265396f478943f01cba97b25e2b49cc8aab089cce01e345964177f78","first_seen":"2026-04-03T16:55:19.65013Z","last_seen":"2026-04-03T16:55:19.65013Z","times_seen":1,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/client-portal.d41d8cd98f00b204e9800998ecf8427e.css","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/client-portal.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20\r\ndate: Wed, 16 Apr 2025 13:08:13 GMT\r\nlast-modified: Tue, 15 Apr 2025 11:45:40 GMT\r\netag: \"7029066c27ac6f5ef18d660d5741979a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\ncontent-encoding: gzip\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _qv5c6ZW4Ry8rZDUAdC_-xMPseJfX9kjaulAEVWz6suwbQ3gQLyuXw==\r\nage: 30426382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/chunk.05d05086cebf955ab539.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/chunk.05d05086cebf955ab539.js HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 31 Mar 2026 11:52:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 11:51:56 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\ncontent-encoding: br\r\netag: W/\"33ac2a1eaf84437f49b8d36f14f3ab5c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: a6F1ivmrq_SoCTRof_Uf6reZ7PdmMw474xbSpwJqVThTICsxdOn23g==\r\nage: 277343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33469,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33414)","md5":"33ac2a1eaf84437f49b8d36f14f3ab5c","sha1":"c2b09b9025489ab329c788b68349adfb201fd99d","sha256":"5134a293cc37e3dd112c17f341185337e854badf8d1c3703ddb9aa319f9e5de3","sha512":"97b321c372964d6817a268b91c7cf3f3d0ca1501aa5b19dab0aab458062efe2ee6e2a3710ccd4ff1b166a42a12a67ac2bb085633cb04b41377dd6e547d6f6492","ssdeep":"384:ezxCkzibQcqCcUs48SYD9nzJyoDqlHPAQYD:ezwVQcqCcUs48SizD8HPAH","tlshash":"9ce275926c8573eb41bd8d11577bf3e17a438da3535ab885860dccaaab4cc87b0c18d9","first_seen":"2026-04-03T16:55:19.651053Z","last_seen":"2026-04-03T17:38:14.175674Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T16:54:30.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-pingback: https://www.weinsteincounseling.com/xmlrpc.php\r\nx-cache-enabled: True\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://www.weinsteincounseling.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.weinsteincounseling.com/wp-json/wp/v2/pages/4\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.weinsteincounseling.com/\u003e; rel=shortlink\r\nx-httpd: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"bxSlider:4.1.2","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":135464,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16588)","md5":"907d15ec55fa861cf0986bab62bf7fe4","sha1":"10e6ad8cb7572a6c47218c712d1c683ff2d3d543","sha256":"69761d2e04b22d184d08ed2ce742eacd2642de9519c8379b6759ed54f9b163be","sha512":"3794e52fce7603382e42b1b80631743a9bf92bb1aaf93ae661bac3b08f2e745983519c1a94882a42f41525a1d7c56963744a5bf984e5723c599d9265cb128435","ssdeep":"3072:HDJMaumbMkzC3FbcGuvr+u2mIcZ0qyMcDQSMWi/K7q:kuvT","tlshash":"60d3d6b2f8085c29261783bdb185b585a9abe074e20207b9f0f2617d57c4df1297b78f","first_seen":"2026-04-03T16:55:19.65191Z","last_seen":"2026-04-03T16:55:19.65191Z","times_seen":1,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/bootstrap.min.css","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/bootstrap.min.css HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1ca31\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"9e489b7c0d0ed0a38f816632f9baf4af","sha1":"cb1f4e7129aa1759c948c3191a93abe3b96aa55b","sha256":"a091c04afd57d1b67bb0c06add63c40b1f0a212f45f1e52439cb847a67af5c77","sha512":"15d93d7a6bcc2958f2631f70ffd13f917134cd8909dc865b5e2bfe660bd9527983bbe8732c642caec9035f8ec8a178644dc97f935682954a1185f590b13467fb","ssdeep":"768:byzGxw/jyByWlJxtQDINHHlgmqITm8qAdwFKbv2ctBDI35UPyu8psYvS1Ft:/w/GpiINHHlgmC8p5b5ZPUpE","tlshash":"beb3d8a0f11031ea7333c55a72d0ed872219a153e66b4eb7f22f25d84f856ca1673f1a","first_seen":"2026-03-18T07:26:08.516267Z","last_seen":"2026-04-03T16:55:19.652741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/images/about-sign.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/images/about-sign.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 14949\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\netag: \"5fecdac6-3a65\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 56, 8-bit/color RGBA, non-interlaced","md5":"b38e81a4daee4c53939be1e99f6c7d5c","sha1":"a5c6cbc42ff5b070a356da78f77175c9c8ed5a81","sha256":"a98de8fb1e7dd01e30171362d2baea4818073061a00135ce53c9bc3c2c26b2de","sha512":"03107051d7449ee1a81c3c524f1ce9ac27653067a9c1a2e5e6817c404374ad0f092b74dceca605597d970e617c6b6011b344b4ee64c9d206968a0e1501cf32dd","ssdeep":"384:dTfZvz4nMQQZ6wbrL3LhS65UyFUpK3mvY6/p0+x/3HD+uei:z0nMQE6EJ5UyFUpK2AoS+t3Htei","tlshash":"4562d1ff7ae50faaa71d0b3a500a445dd5ae1c06086bb289740edc4714725ce932cdbe","first_seen":"2026-03-18T07:26:08.428525Z","last_seen":"2026-04-03T16:55:19.653616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/colorbox.css?ver=4.1.2","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/colorbox.css?ver=4.1.2 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-11f5\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ea198b9be0ae3a4a9b12207d62a6f0e","sha1":"77780ec254f6b48ac3be2647a5c13a7ea80d8a2b","sha256":"9a5e170103ceb84a41be7d509ceb98ff8cf6d58e908cf044bca6c1c0d0230f0b","sha512":"aed7fe45cfcee8014106adb9ecb8f6f1bce5d2a186b7795dd41ff29887cec9011681366027b31b8a5fba77e1351d2682a14377e7628fb37949f5fca36f5c0470","ssdeep":"48:6noexvgJ7ZZFYhUnHVgo2DOo+N6/Q/dW2JiEK4O+hAjv6ATfkAWjdHi9UB9/4P:HlJBn1go2Dbd/4PJiEK9IYSEsxIdP","tlshash":"0591003686d9375e905bd3216724e7b85224c40be7934daf721da879f7ce25800b328f","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.654666Z","times_seen":12,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Aug 2023 16:14:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d65e72-3509\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T19:30:20.082588Z","times_seen":637330,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-199815255-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=UA-199815255-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\nexpires: Fri, 03 Apr 2026 16:54:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 03 Apr 2026 16:07:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123175\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355059,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"227679faeae96ddd171dc87a55a31693","sha1":"db75ec94ff3a61255be2804c4cbebe4b5aee939e","sha256":"e957ddb512fab3c8e464d789a322ed8003e8599c0f68827c10d4928ba25c8ca1","sha512":"7513c377f57d1a8d54edb3194d0e904e572adef4d8e4449b57f9c90d3083212bacdfc8c1eadf21b1f352f64f2026a6cbc7998493f1babc6114379c429785aa04","ssdeep":"6144:j3eqQg9r8DP9p/F8x/cp+/5EiWc13oH1r7bkx:zN87t8h0I","tlshash":"807409cdb3da706643a3a478903f008bb27a79d2b84cc895f185d8d42e746a94277f7d","first_seen":"2026-04-03T16:55:19.655688Z","last_seen":"2026-04-03T16:55:19.655688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":75,"dns":1,"connect":30,"send":0,"wait":58,"receive":70,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/odometer.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/odometer.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-52d7\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21207,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (447)","md5":"08ff1080b680b55a34a4488c403d039f","sha1":"df3ca7008631adb78693343dc7b929f028034ce4","sha256":"c211ac14f0c94929445fe8f1759520592dc5c40c78b5e891f007bc1936c71038","sha512":"443cc7146d98c26cc2a9dd039adb25a7bc4e6720e35c10e3ad91ddf82dea1474ed345e0c450c9ab3d5ef013ddecd74be8e0a4e17bd15b8dd1b4c8e2b8c45b196","ssdeep":"384:EyCueeAz4U7IDbEidNRf9nTZEUjcaY5uhfNI0XfnWfY0H4LeWwn6I:EyCuewU7wbBB9nTZEq457SfEH4LeWwv","tlshash":"62922f4a7ef722999713702d6fdf1104ba7a84072018d8487e2c12c5af92d3496eaffd","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.65635Z","times_seen":243,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/waypoint.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/waypoint.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-448c\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"db84a293a418f4aba9fd3292260f3c92","sha1":"fa99a6634a50cde80f4c7765b79b2f594b686cdb","sha256":"25640bdc1ab3349556b2ef4c8bfd974427974f5db05fb9b1cb4b3ce850da798e","sha512":"9d2b05bf7f17dfbec1d579ee8b17b7541e3aa4ced70292ea256b21caa538df4dcb6a010350c6acdee5c7e590c671fc426410f3a2ed4862b18715e228ba99fe83","ssdeep":"384:5BSFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5iqxgn4E7vfrF/+onen","tlshash":"4d72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21351ebaff8","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-04-03T16:55:19.65685Z","times_seen":258,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/18a9c36ed1.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 03:44:58 GMT","end":"Sun, 24 May 2026 04:44:53 GMT"},"fingerprint":{"sha1":"0C:5A:E2:01:10:8C:15:2B:47:73:4B:2D:0B:04:A9:CB:C4:D5:87:DE","sha256":"8A:BA:58:86:7D:78:23:12:27:76:D9:DA:25:26:4E:8B:3B:98:BF:CB:D1:33:A9:B0:4F:4C:17:B3:6C:58:38:24"}}},"request":{"raw":"GET /18a9c36ed1.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeLXpQlxDyCDHkbEin775M6Xp8H%2FtU5ANCZJ1dAFjchc9ODWybsa1ItJGBuN6cGr2xn4UdUkBEuNtwFIRn7KGeDv5PgUILpAPKg0yGhVa01uwNstcJFPXsXzaq%2FQZ0tAeQohX4Dh\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=1800\r\nage: 950\r\nlast-modified: Fri, 22 Sep 2023 00:19:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"0d23c246d61e1af500f3c1f297bac576\"\r\ncontent-encoding: br\r\ncf-ray: 9e699880bf9a712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0d23c246d61e1af500f3c1f297bac576","sha1":"1339fe2a910657371771cfb7ae91ad53455ebb58","sha256":"dd72d4586e8a12a2435b551e93b8f6def6cfd2f40a8094c9d0dc4568cadd5fd5","sha512":"9a9227a81905dfcb4b6af7c0cee1dd22b0e5b4c837e3d3d7078b84ea62c1da10d1fdd3e786fc19e0e185b4e3627b60b220cfbb1aa49ed0b643896bae38280b26","ssdeep":"","tlshash":"5d1157d86e22205a1012cc177dab42a5fd4520967c24af6a783f09699de3f0f312dbcc","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.657809Z","times_seen":27,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/fonts/fontawesome-webfont.woff2?v=4.6.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/wp-content/themes/Archive/css/font-awesome.css?ver=4.4.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71896\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\netag: \"5fecdac6-118d8\"\r\nexpires: Sat, 03 Apr 2027 16:54:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71896, version 4.393","md5":"e6cf7c6ec7c2d6f670ae9d762604cb0b","sha1":"97e438cc545714309882fbceadbf344fcaddcec5","sha256":"7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73","sha512":"dd945face918edf20b7283b7416ae7b3735269945e3f3e379e770425024c1de1fcdc7cfb952381d295d0d1f58c8ab191fd29030f2051d10501557bd7bfbe3658","ssdeep":"1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7","tlshash":"756302f87e71b01d5a306f74e56730e2491c9283e79593f8a8297cb681b2f493742c7a","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-04-03T18:36:18.70002Z","times_seen":32876,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":278,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 116922\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-03T19:30:54.279442Z","times_seen":132596,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/jquery.bxslider.css?ver=4.1.2","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/jquery.bxslider.css?ver=4.1.2 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-e50\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"15d441d53da5fc320f81ff47087ff291","sha1":"470d01e72572ca779db8bd003111ce980f026c77","sha256":"8046af1acaf9825e8d78675c1f931cc6d0ddb0df58f65a2ece24d56c069052df","sha512":"e663e8f4af9b7b73db2611bbf561de669727459d3b44f2a0cfddf8c5f68716a0a7def9824038c924265f712a579192e6bbbd9ae21e203582c99ac5c96c08e8ec","ssdeep":"","tlshash":"b771cfd01a763eab611e913c7e95c36d4c2d8063af0f4deee0a5b87d478dbc10223985","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.65933Z","times_seen":10,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/owl.theme.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/owl.theme.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-688\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1672,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dfe197bc34ed46287e7c9655ef5046ca","sha1":"07c9b24db0fd438deec68ecd1226b8dde45deac4","sha256":"2c5be6ae084e673addd27c267d27de05b3abca90c7556ceda7751ff48ec5b20d","sha512":"3e918dd174eef83ba5aaef7f70bc64116bd141a0b6f248cb9aa043d7c94cc934cb1ae33600aa9edcc4d99a339f2887c99651bbfe6de7084df5feddab50eb4b09","ssdeep":"","tlshash":"1031cd9aa618111d6466c5ac7e2ccbc34b4f2063970c4ee8f4ee787ce24a410363bb5d","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.660222Z","times_seen":74,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget-cdn.simplepractice.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Apr 2026 16:54:34 GMT\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1a1622f39e9f351ab38999670ba20059","sha1":"4406222602ad0faf8e26423edf040c533bf72b82","sha256":"f0287112ce33d05a0d208d75dd84334092c60e78efbe859c3042c942edad764a","sha512":"1a652ecb2a0ed226e3e3b97c38aac37698b59d5ddee47265aee94c639388cca8fa8737892e94e70bc1415107f572c07585696c77c0f0903dfda9f814a82ca8e2","ssdeep":"96:aOEaNqOEaXFZHOEamOEaO3vOEaBOEaBJc+uTOEaNcNDOxMaNqOxMaXFZHOxMamOQ:9NNIxO34OxDNNryfO3iExlx","tlshash":"b1a18992002ba400ab971dc273cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:23:42.312671Z","last_seen":"2026-04-03T19:39:35.521126Z","times_seen":2539,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/.deploy_status_henson.json","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:35.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/.deploy_status_henson.json HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html\r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 274\r\nlast-modified: Fri, 03 Apr 2026 02:50:25 GMT\r\netag: \"a9345dfb689c5cca03a011c69cc90f3b\"\r\ncontent-type: application/json\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 28\r\nx-request-id: 78977364-8ea8-4ebe-a4b6-a4dd2a6f9d79\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 19447\r\naccess-control-allow-origin: *\r\ncache-control: max-age=60\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":474,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a9345dfb689c5cca03a011c69cc90f3b","sha1":"02760547e848890b3700c26cc6e07615eb0763be","sha256":"623d449eb8d421ba35beb5e302112bda4537cba97838cbd6065fed60535f613d","sha512":"2c561d555db1550e2bbd1d8ffe774847fe7f9aa5674969477d84ad06efbd95409cb5bc3b1221989abd52dde4738c5b788bbd842483db1c8e08adda29aaaed04d","ssdeep":"","tlshash":"eff09e70ad1909285fae4c1ab88fc8b4556738423c2c1d5f94a12bddb11072b037320f","first_seen":"2026-04-03T03:04:08.233928Z","last_seen":"2026-04-03T17:17:57.368459Z","times_seen":202,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/inner.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"54.240.174.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-04-03T16:54:35.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /inner.html HTTP/1.1\r\nHost: m.stripe.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 930\r\nlast-modified: Wed, 10 Sep 2025 21:05:01 GMT\r\naccept-ranges: bytes\r\nserver: Cloudfront\r\ndate: Fri, 03 Apr 2026 16:52:57 GMT\r\ncache-control: max-age=300, public\r\netag: \"441070f07f0e89a26ecd81c9afcab8ed\"\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nage: 99\r\ncontent-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-e357n1PxCJ8d03/QCSKaHFmHF1JADyvSHdSfshxM494=' 'sha256-5DA+a07wxWmEka9IdoWjSPVHb17Cp5284/lJzfbl8KA=' 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: SYE7-2ZXTpfWGAH9FR_6z32cWbtY4iYZD-Q2dWJyDRiXSTVzHQti8w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (930), with no line terminators","md5":"441070f07f0e89a26ecd81c9afcab8ed","sha1":"4fe0f929d48c96ee4e78a1f0ce331eda37edfc60","sha256":"92844e6b1ad5890a9e5e4b9dfb7abdb37dca64e8ca7365052c9d2fc8103c349d","sha512":"464029faf1c59e1f8c6f82c4f0bce314a98b0f3574f764ec067d4bd8cbe6d2016b83357bf242df348f1fb6173485372c2cc9601bc65ca1c99d57809c79cefb27","ssdeep":"","tlshash":"db11049639c85a3442394712a6abb309321657275874ec108406dca87fb4c9bd8637c2","first_seen":"2025-09-10T21:19:46.090509Z","last_seen":"2026-04-03T19:32:49.52261Z","times_seen":56172,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sessions.bugsnag.com/","fqdn":"sessions.bugsnag.com","domain":"bugsnag.com","tld":"com"},"ip":{"addr":"35.190.88.7","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:35.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bugsnag.com","organization":"SmartBear Software Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Mar 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:43:05:26:C7:B2:0B:00:7F:AC:D6:13:6E:36:0F:AD:3E:09:1B:00","sha256":"46:0D:F3:4C:32:52:70:A6:46:14:83:77:85:69:B2:AA:56:A0:DC:69:7D:E6:44:E8:32:FC:95:B0:28:00:7F:DC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: sessions.bugsnag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nBugsnag-Api-Key: cd87d7479ba405250a10f30eb9673844\r\nBugsnag-Payload-Version: 1\r\nBugsnag-Sent-At: 2026-04-03T16:54:34.870Z\r\nContent-Length: 447\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":447,"data":"{\"notifier\":{\"name\":\"Bugsnag JavaScript\",\"version\":\"7.25.0\",\"url\":\"https://github.com/bugsnag/bugsnag-js\"},\"device\":{\"locale\":\"en-US\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"orientation\":\"landscape-primary\",\"id\":\"cmnj58woj00002a60t4jqo8hw\"},\"app\":{\"releaseStage\":\"production\",\"type\":\"browser\"},\"sessions\":[{\"id\":\"cmnj58wom00002a60snv94ap2\",\"startedAt\":\"2026-04-03T16:54:34.870Z\",\"user\":{}}]}"}},"response":{"raw":"HTTP/2 202 Accepted\r\naccess-control-allow-origin: *\r\nbugsnag-session-uuid: f006fb4a-d602-4c73-be3a-343012d93eeb\r\ncontent-type: application/json\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-length: 21\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1807ffa1d44e667592a0f91c668ba65b","sha1":"4d48849fa0f6917c9c57ed958680e9a1e722382b","sha256":"0ba7c0356149946bf0642fab4ef85b95e7090f6f785d0fb84323d0c442e5190a","sha512":"d97f38a96645df4cffe128e98d6a27b145b1d8c45501710d630a2551363383aeaf795d015fac75145f110f9fd58ae08e325cfc71209700bccd48cba17845582c","ssdeep":"","tlshash":"9d7000002a0008a008800880002002a0aaa02aa0003a20c0c82c002008808c08008000","first_seen":"2023-04-05T03:50:10Z","last_seen":"2026-04-03T18:25:49.891625Z","times_seen":17086,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/owl.carousel.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/owl.carousel.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-5cb\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1483,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dd5a0ab7a995e8b883d27c29491677a6","sha1":"6f821cc741e245fb5fdf7d6b9f1ad871069d9323","sha256":"14599a1100bcb81f879560d9a6cdb07686817a35e9e6184921a3018e2b2b957f","sha512":"ef93db59f8aeb7f2160af6b34044e2edcd6c5a151fec9304708d94917095fdd1c1f661095348fa90e8f3c483669f2e5bccb6235c65e2f776b226286ffcfec38f","ssdeep":"","tlshash":"3d315bf011342589652bc79e4acfa7181a3ee1129d025d4f765f1e0e47cee4e611fb4b","first_seen":"2023-04-11T11:57:01Z","last_seen":"2026-04-03T16:55:19.662424Z","times_seen":63,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/docss.theme.min.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/docss.theme.min.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-cache-enabled: True\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://www.weinsteincounseling.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-httpd: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"bxSlider:4.1.2","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":119716,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16588)","md5":"26451d307c37c4249cf9a0898e7e2603","sha1":"05b2ff65015c5b818a41b6f3f7d4f1dc4f9b4bb5","sha256":"f526ffe11ed7d3c2f29d7087af06c12d1846c3ec28a04efad8f8f209045cb85b","sha512":"51a43e2151c6163cf003f9a2a70646eb6990656114a4d2d91a641d2afc0be835286a22f96dbe1b67a0642953e79d0916a41fb1af740a9ba727f3e5e06363db63","ssdeep":"3072:YDJMaumbMkzC3FbSpr+u2mIcZ0qyMcDQSMWi/K7q:OT","tlshash":"b1c30ab2f4185c293717837cb185b49569aae074e24607b8f0b2a07d97c49f139bb78f","first_seen":"2026-04-03T16:55:19.662966Z","last_seen":"2026-04-03T16:55:19.662966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r.stripe.com/b","fqdn":"r.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"54.187.159.182","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:36.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stripe.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4E:12:89:06:4D:39:6B:F4:9B:D8:C9:19:66:13:EE:9E:F3:53:3F:62","sha256":"26:7E:20:10:BE:81:CB:76:85:82:92:20:FB:65:34:F3:6F:3C:FB:AE:74:9B:D1:E1:84:C2:9A:42:F8:A6:2D:2A"}}},"request":{"raw":"POST /b HTTP/1.1\r\nHost: r.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1180\r\nOrigin: https://js.stripe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1180,"data":"client_id=stripe-js\u0026num_requests=1\u0026events=%5B%7B%22event_name%22%3A%22elements.link.init%22%2C%22created%22%3A1775235275476%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A%221%22%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Firefox%22%2C%22version%22%3A%2267ff36ff76%22%2C%22event_id%22%3A%223912a407-c4cf-43c0-b377-5af73e6c4d7a%22%2C%22team_identifier%22%3A%22t_6%22%2C%22deploy_status%22%3A%22main%22%2C%22browserClassification%22%3A%22modern%22%2C%22browser_classification_v2%22%3A%222020%22%2C%22link_api_client%22%3A%22true%22%2C%22publishable_key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22request_surface%22%3A%22web_elements_controller%22%2C%22livemode%22%3A%22true%22%2C%22routing%22%3A%22root%22%2C%22session_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22stripe_js_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22browser_storage_strategies%22%3A%22sessionStorage+localStorage+httpCookie%22%2C%22deploy_status_time_to_fetch_ms%22%3A%2270%22%2C%22deploy_status_fetch_failed%22%3A%22false%22%2C%22cdn_name%22%3A%22Fastly%22%2C%22cdn_pop_dc%22%3A%22HEL%22%7D%5D"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://js.stripe.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\nx-stripe-proxy-response: upstream\r\nx-stripe-server-rpc-duration-micros: 2116\r\ncontent-type: text/plain\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":540,"dns":16,"connect":169,"send":0,"wait":172,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/superfish.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/superfish.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1b3f\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e25125463e3a68f85b0683f3bc21433b","sha1":"ed17fd0bf4f1d0790a2b8c0ed42bc5636781ce4f","sha256":"de374484df39f525b35a5a5bc8f64a8c00b3c6d2c95e353bbe077710adc49620","sha512":"4ac2253d5b9e8554a9d45dffc2bbf04848bd0c898d8edd795cffa04571fdeb6152b99a4acaac7766674c9e46be52efb8c6b52649c3e9f6318cf19ac87efdca42","ssdeep":"192:Z31a7G++jacaTOh0Zl049C9NmjaEg9Qi6TA:ZIDDTOhgxLA","tlshash":"52e12ec9fb9e25d3c2ba325a08af50cd623d9076dc46182ffc74e66c6c9487c826197c","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.663982Z","times_seen":562,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/owl.theme.default.min.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/owl.theme.default.min.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-3f5\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-04-03T19:04:50.646989Z","times_seen":18396,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/frontend/js/dist/frontend.min.js?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/plugins/convertkit/resources/frontend/js/dist/frontend.min.js?ver=3.2.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 19:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0738d-1cca\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7370,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370), with no line terminators","md5":"86c1d2b60be23d2dc908d056b1a7e914","sha1":"0602195d1c196f43ff759a39eb343569ff3daf15","sha256":"de975024a289ce0e4cc76629606400ebe202c9aa01a28367e135a8fce5fb8b22","sha512":"a10974653eb304814e92cf623a128c9a114b0878a1ef3f758e2a1e5a5d316ff14aaac56c599e09da6f145b14b190dd80324299ec7ab0d7ad4e32658c536cf415","ssdeep":"192:pRIpqf+CeS4fu1oWKtu3Iv2iTTaBw5yv6E4N3yqp76ypyuytBy:rIq+CeS4fu1oWKs3IOiTTaBw5yv6E4Nr","tlshash":"91e14470bcb09cb00b7b057b55ae2741f73156de94474698446848981eececec2f2b7a","first_seen":"2026-03-01T20:54:48.980961Z","last_seen":"2026-04-03T16:55:19.664997Z","times_seen":117,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/wow.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/wow.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-3cbb\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ea81e4551d35835e87309a679fa22df4","sha1":"6ecb988432bae56dd5a710cc32fa03847670a98f","sha256":"f11c99e3d36695925003b17b9faaecf2339bd1a9b045bad6da6bd4a7f562557a","sha512":"6e00b8f29a9a090c781a838f0e64c8f98d48c0c691eeb37c9628155ca5c7a2b8ddb9732bc5c96239e8ed0790681ff79f97f93a494d839bd2d45c2ff228f2f3c8","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0ID:cRZmU+GeKrAq6aItnefKh","tlshash":"ca62cc883eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa053897fafb8","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.665497Z","times_seen":566,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_open?user_identifier=a22b5a1b-826e-49d7-8b32-a362e2a04c4a.27fbfae5-ee7e-4cd2-93f5-a278ae29c8a2\u0026customer=a22b5a1b-826e-49d7-8b32-a362e2a04c4a\u0026revision=976efc9a-7fdd-4b33-83d9-78a9fcb0556c\u0026current_page=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026policy_name=Global+Privacy+Rights\u0026default_policy=true\u0026locale_code=\u0026layer=none\u0026action=non_open","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /save_open?user_identifier=a22b5a1b-826e-49d7-8b32-a362e2a04c4a.27fbfae5-ee7e-4cd2-93f5-a278ae29c8a2\u0026customer=a22b5a1b-826e-49d7-8b32-a362e2a04c4a\u0026revision=976efc9a-7fdd-4b33-83d9-78a9fcb0556c\u0026current_page=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026policy_name=Global+Privacy+Rights\u0026default_policy=true\u0026locale_code=\u0026layer=none\u0026action=non_open HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nx-cache: FunctionGeneratedResponse from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CKSOJk08AkkYK6PaHzgrFxoGL0m6BlPCl82HQDH_efyWzwqYqtlvNw==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-03T19:31:06.190051Z","times_seen":552080,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/style.css?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/style.css?ver=6.9.4 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Jan 2021 06:49:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ff80069-3b154\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242004,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (312)","md5":"6466764049a512e6fd388bb3b2a99b4c","sha1":"028f90d95d645c138db8fb55322f25a2d42a6304","sha256":"c56e006df25fce2a5a956ce8daed01bc7d9a1ff2b861bb3f5635317efaae2958","sha512":"f47410eefed351d4f6281c476fd242a9c15f29210308b6444bd6ef67029ed37b203554a56308df559ad14f05309b5bcdfe19f3120ffbc1eae499750321aaf680","ssdeep":"6144:jR/NzdDThaBWfp9RtTPIpynTL1sKiPumnEorTys5uQ2/7rU7yh79CVlpi5sToWeO:jR/NzdDThaBWfp9RtTPIpynTL1sKWum/","tlshash":"42349853ae141c446217d1b9bf862fa1eb2e50529f0f0da9b1b2792c83c45f512bfb4e","first_seen":"2026-03-18T07:26:08.410197Z","last_seen":"2026-04-03T16:55:19.666498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/nivo-lightbox.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/nivo-lightbox.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-2126\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"188a0d22de70fd28b86360e61fb5c76a","sha1":"b7613fbed8df163e05f16a9b64f43aafb2507ab0","sha256":"fb211d399095fedfbbbfa9f544be2368e5f32eac629e02eeb28723ed3f1997d6","sha512":"6c030cbc37188e1ecbc23f9f65c9a6521d9d451157c6abe187310529342467c1868a041d6c068e3b7319367c6aae7f9472d5d95ea3e00ff332e53098378e970e","ssdeep":"96:PQk++xMaUHehV6VK9OX1I52ZlNmNtNSZem01aN9R2R2YiNIkSM0XR3kpDuvhqPR5:oeGX1I52T4DsIzcHwYD6kSMvKc3s/an","tlshash":"9502632b3700154461e9a11a23cac7750f3d901bbd127c7fb2d9e45babcb1e90ca3e92","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.667278Z","times_seen":58,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/owl.carousel.min.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/owl.carousel.min.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-d17\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-04-03T19:27:00.664087Z","times_seen":30250,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/Untitled-design-21.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Untitled-design-21.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2136510\r\nlast-modified: Wed, 30 Dec 2020 20:49:34 GMT\r\netag: \"5fece7de-2099be\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2136510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"f71e83dcc0f93ef14ff95ae49c049a16","sha1":"e08aac5bee593468bdd7d140841684dca2ab6936","sha256":"ffa1dab694e5b614258b7a344ae1c0f5489903418cdaf4d6a102e5d38230c0bf","sha512":"6648f205e0eac2e528776656fa3f1ef3e114f3bd7d5159bce6d75e6af25ea7945256994f78047405207ee6351e383799d589428bb4e8fa1410b1c79c561fb2d9","ssdeep":"24576:+2G+vKbrVLBxBILyFtccK08aiDjwoykuqCI2gU2+UyPywrHS:trvKbrXzCA85Djwoyc2XHPrS","tlshash":"f52533b1edec265effeb2e27dc0a11a5108af4023ac4e435586dbcf9f3251c65ca5290","first_seen":"2026-03-18T07:26:08.420585Z","last_seen":"2026-04-03T16:55:19.668718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":1369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5WDWM2VH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtm.js?id=GTM-5WDWM2VH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\nexpires: Fri, 03 Apr 2026 16:54:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 03 Apr 2026 16:07:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 114918\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":339135,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11957)","md5":"5d7ce1bf0481a49bf582c9f8a4cda19e","sha1":"451bace09ad2b976ccde3066881f6747f42a43f1","sha256":"e5accb6808e0538c141df44459e20f7ea14ece9c1135c542422f974666032c04","sha512":"6d7e05079862ade84bbb925c6e4c11efe4ddf3c1f6f7776e48173b5189695a93fc34fad3206ffa3f00812deae0ef39ecc2dde2bcd92d49645ec9d9a344d1396b","ssdeep":"3072:d5SGkP7Wa00eqshTf70fU397PGdlr68/XP9QmEW/biaxax/cwV+/5EiWxp+zUkOz:W3eqQT9N8DP9p/F8x/cW+/5EiWr+zJOz","tlshash":"2974f7cdb7da746243a3a4b8903f114ba13a79d2f84cc894f086d8d42e74a694277f7d","first_seen":"2026-04-03T16:55:19.669476Z","last_seen":"2026-04-03T17:38:14.216075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_preferences","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"52.84.50.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"OPTIONS /save_preferences HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: CloudFront\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-request-method: POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sao444muueUu3OGE_nqxbdQ2Kazd-sERGgse9ohC25AhX4quNosaHA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3ac0ef88b7c21b828cfbd896952283c","sha1":"fe7af8095a1dc748a3bd25582159687a901c6bb3","sha256":"617f7515100f8a419ee293ae56945333a435d78ac67adf9e3ef5dc2103cff8b2","sha512":"e5c899358056552f7fab374f2a4da27462b6f84ba67e38b538298b08e03d40c0fbdba5c33468af98703563ce66ba687b4f274105c8b6b6d4066d216a785548fb","ssdeep":"","tlshash":"91600000c03c03f3ccc03c0003030c003f300c00300f00c0030cc030c0000c3c000000","first_seen":"2024-06-29T16:39:46Z","last_seen":"2026-04-03T19:38:01.106061Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.convertkit.com/forms/1921418/visit","fqdn":"app.convertkit.com","domain":"convertkit.com","tld":"com"},"ip":{"addr":"3.143.37.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:35.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.convertkit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:9B:67:1D:59:0F:29:4E:12:BA:49:69:7E:A6:E8:38:15:20:FE:D5","sha256":"B4:40:A5:8F:A8:1F:CF:45:70:08:34:9F:58:C8:C2:65:77:B6:CC:89:53:88:9A:20:82:1B:AF:93:FC:B9:D1:1E"}}},"request":{"raw":"OPTIONS /forms/1921418/visit HTTP/1.1\r\nHost: app.convertkit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ckjs-version\r\nReferer: https://www.weinsteincounseling.com/\r\nOrigin: https://www.weinsteincounseling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-length: 0\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\naccess-control-allow-headers: content-type,x-ckjs-version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":361,"dns":49,"connect":104,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/animate.css","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/animate.css HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-11498\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70808,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9b01508c4038b9fbeafa9676ab7d8b62","sha1":"9cc2b3b9d0f376328cc32b80e486850a2964c27c","sha256":"c065a79be7511e259631f7f99f4191ad98befcfcc2f739cb2c18e39f11c48272","sha512":"0f0aedff6c56c34f96cab40dca9bf47dd1345dd701575ab432e6ce8de8ba1152179a3c8470dc2230432852beca751ac2df918116e387d831d87714edc5183eda","ssdeep":"384:x/HuaubH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVrib:ZHuauqfqftulucfwfk+1fHf7SpS/fjfp","tlshash":"be631f6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-04-03T16:55:19.634576Z","times_seen":313,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/cropped-Copy-of-WEINSTEIN-COUNSELING-32x32.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:33.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/cropped-Copy-of-WEINSTEIN-COUNSELING-32x32.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 855\r\nlast-modified: Wed, 30 Dec 2020 20:22:11 GMT\r\netag: \"5fece173-357\"\r\nexpires: Sat, 03 Apr 2027 16:54:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5626d05c9fa59c80feb7a5bd7efeaff1","sha1":"a322c4edf8791ad18407c03bd0f7e091b928a2d0","sha256":"bafa0a425abd182099717781c36fe71680e84dfdcdc634a0a80b84bf03374839","sha512":"f0c8d48f25c40b09861a953b4b5598289f870dd84607fc5c06c134dc5d876f190b2785220e36ba19a68a7cac37893ed12f49608fedb04540dc8618e9b05f3649","ssdeep":"","tlshash":"b411dae3d591261b45480e3f9410362294e41f40ee5f9b60b539e4774130888bfae610","first_seen":"2026-03-18T07:26:08.401665Z","last_seen":"2026-04-03T16:55:19.670501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2wy8f7a9ursnm.cloudfront.net/v7/bugsnag.min.js","fqdn":"d2wy8f7a9ursnm.cloudfront.net","domain":"d2wy8f7a9ursnm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /v7/bugsnag.min.js HTTP/1.1\r\nHost: d2wy8f7a9ursnm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Fri, 18 Jul 2025 23:30:22 GMT\r\nLast-Modified: Wed, 03 Jul 2024 16:01:44 GMT\r\nContent-Encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=315360000\r\nx-amz-version-id: f16Cc._ARQFq6z9lYMvuaoOCfNG4aVmw\r\nServer: AmazonS3\r\nETag: W/\"e8568c163174e8c2e5f336eaaaecd340\"\r\nVary: accept-encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: gqJ9yBJ58U816Nl-LoysNTt_dJ-WfNypzUjjWy7hEL71Cyy0PutnDQ==\r\nAge: 22353853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44208,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44154)","md5":"e8568c163174e8c2e5f336eaaaecd340","sha1":"ac839b43ae19d2ccd11feab3b74a575cb768a9db","sha256":"9206ba27ab33effd43093776bb54588a1df2103964e14da7b93322836617d69b","sha512":"16973a7e2fe02d790169f067dfbb8482703abe1b2f526b31e86962f0ee1c1f2e3561e98db40972defc27d88879ed4184741091829a1ee3bdf2ea9051b238753c","ssdeep":"768:qHY2LhHptfQG4mE+evw6bsP44LSiTpbRlQIZ:8HptoG4l+yASuZX","tlshash":"3a13d7cdb6c1b43696636171603f600bb33b5dd9280d90a8b16498edbdb8a4cd3a7f1d","first_seen":"2024-07-03T18:45:08Z","last_seen":"2026-04-03T17:38:14.191658Z","times_seen":690,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":40,"dns":32,"connect":8,"send":0,"wait":2,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Nov 2023 01:22:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654c3473-15601\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T19:30:20.096582Z","times_seen":683705,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/Untitled-design-19.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Untitled-design-19.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2301204\r\nlast-modified: Wed, 30 Dec 2020 20:48:29 GMT\r\netag: \"5fece79d-231d14\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2301204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"da6dc73f04723efe81c9355ffaf76e0e","sha1":"0cce9b5854a1294076bfb9e6560b58df599538ce","sha256":"8ab35593fd0f6faee4ebdb348b91537f4d6c59a321ecbd53c9a3f5644472c366","sha512":"61018b2cf24e795e073515e16444589205595f2569e59a2e12eb99c83ed3197dbfb420e52a634967887151d47e8f06359bc0c287c2da9c86dc1d963e0f9ccdf9","ssdeep":"24576:oQZ+hG+oYKp9JDC5ua5qVbKt4JBosW9k/fGyzBNhMDfFf:oTGZD9U5uuqVbi4JBonk/fGyVnMDV","tlshash":"34253323927688f9df2383839d3cede8d96e861253c1c45be811adc9ab5fc2841d7395","first_seen":"2026-03-18T07:26:08.388391Z","last_seen":"2026-04-03T16:55:19.672382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":802,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/integration-1.0.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/integration-1.0.js HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Apr 2026 12:32:38 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Fri, 03 Apr 2026 16:54:32 GMT\r\ncache-control: max-age=3600, public\r\netag: W/\"b23b02d04980d1b9c08b5507f866f700\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: KQX_AAWDpF3MGY4oOeUHEoNYYJxHV9Ia-vEWmtSbAUxmSMzAT1HWIQ==\r\nage: 1290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9023,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8979)","md5":"b23b02d04980d1b9c08b5507f866f700","sha1":"66bf78f25cf5ca339f5e62af3568edcdd6b2492b","sha256":"c74444236fbe8a7a751a8c965fa847a7461abc3cde7c2f744544156838148be2","sha512":"41a051beb8f444078ccd37bc3b00cda41452cf6a239f83fc7dbfecd0bfa93bf09e8dadc09ed0efeae92d8703f69833b23d35ee3bc693fda925994addc537aaec","ssdeep":"192:4uHDtYH6+YojMEmK7Lv74qhVV2xtQ1Q/KPlzsDo3e4ZTE7vy:4uI6+t+mLv74qhVV2xtQ1Q/KPlzsDo3f","tlshash":"4c1286b723221674c5ae9bc665e57646221433e9e6020c383c9ceddf971dcca25b07b9","first_seen":"2026-03-08T12:43:27.764578Z","last_seen":"2026-04-03T17:38:14.181701Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1242,"timings":{"blocked":562,"dns":25,"connect":3,"send":0,"wait":25,"receive":0,"ssl":623},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.convertkit.com/ckjs/ck.5.js","fqdn":"f.convertkit.com","domain":"convertkit.com","tld":"com"},"ip":{"addr":"104.19.253.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convertkit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 11:10:49 GMT","end":"Thu, 02 Jul 2026 12:10:40 GMT"},"fingerprint":{"sha1":"D7:72:27:ED:27:6C:C4:64:A1:5F:E6:D2:D1:EC:6E:E0:F8:3C:DA:A3","sha256":"14:A7:53:85:3F:78:9D:67:80:E6:95:19:59:BA:16:ED:21:08:78:DA:43:48:5C:FE:D4:F2:3B:CB:B5:8A:70:78"}}},"request":{"raw":"GET /ckjs/ck.5.js HTTP/1.1\r\nHost: f.convertkit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.weinsteincounseling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Apr 2026 16:54:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: https://www.weinsteincounseling.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Request-Method, ETag\r\nlast-modified: Thu, 02 Apr 2026 14:40:40 GMT\r\nServer: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-id-2: c66rV9KP/7vWylefZRU85+ociLCDMuGLUrvcFCQh+I2EYebVjhmLWtWv/59ynjGBoJAEG9G4Onk=\r\nx-amz-request-id: 1ZMJN79PGCYMS2RH\r\nx-amz-server-side-encryption: AES256\r\nset-cookie: __cf_bm=IiadF_JJDMwKMhbFXt7bFz2tkUBR9hv7OT_Lh41N15Y-1775235272.8439786-1.0.1.1-Vr95cp6B00l2jNaPB5I4DgPGu89BLFWIgsYbyga1PgGskTSG5hQ0tJLPw2ky0a7FpPHJNjtmKy_vJ9sBoRWWMQXH1MkA1Z.jiaw_v868eYdIfmE8sKO4.c5jxg83bWhKiP5lPAj.mkF6BZCOMftWEQ; HttpOnly; Secure; Path=/; Domain=convertkit.com; Expires=Fri, 03 Apr 2026 17:24:33 GMT\r\nexpires: Fri, 03 Apr 2026 20:54:33 GMT\r\nCache-Control: public, max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c9d17ee7a9f7c614b0179f15ad892730\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9e6998874c75568b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":44446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44440), with no line terminators","md5":"c9d17ee7a9f7c614b0179f15ad892730","sha1":"84fcf2040ad0e24c356966db03675a88176c49f8","sha256":"2d3e61ec97707e01e18fdddcde925b75c7c75b680487cb2c399a0d5ec147ddf9","sha512":"e86e75387fb72a690c6932d993d48f54f73b878cfc8a5876c570d81e8b261ea236548900a6d7f592895a4519632ffe609b9db72051a0278d8ebbe292c3deaf0a","ssdeep":"768:M14lM1HiOenxhEjxO9seukTKByfnS4b4GHEzCPuc6wddOWrQ4NSbr0CF5/6Q6cQ0:M14lMtxO9seuK0yq4bP/PumFS8CGhWxd","tlshash":"0a13094136a7797102638af592fb064273357984a805805cbe7c9ce76ea8dc97273ff8","first_seen":"2026-04-03T01:36:35.832294Z","last_seen":"2026-04-03T18:30:06.627336Z","times_seen":15,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":90,"dns":64,"connect":1,"send":0,"wait":205,"receive":319,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:35.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 154\r\nlast-modified: Fri, 11 Nov 2022 20:25:37 GMT\r\netag: \"3437aaddcdf6922d623e172c2d6f9278\"\r\ncontent-type: text/html; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 1526282\r\nx-request-id: 19d7cb36-af56-4d4c-8750-958e39c66cc8\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 435381\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report\r\ncontent-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3437aaddcdf6922d623e172c2d6f9278","sha1":"f69066cf20141ac93418102d3eee7c0225b8a623","sha256":"35dcc382eb69d00369d708708cdc545f3968b68fa5bbe3e728d11fedd04f93bb","sha512":"2dae5c5c30c6a0e763d8128f2ce1d467ead432e582ab4ebb68e23991db08f57490abc0eed805fd33fab5503c1737d9d47d4cc1090ae15d7391593fbb295d66e7","ssdeep":"","tlshash":"c3d022e78c3100048ae87b844c52a30c0c09f51a3c528c522ef638b424c2b934c1a6c0","first_seen":"2023-12-22T02:11:13Z","last_seen":"2026-04-03T19:32:49.547591Z","times_seen":75619,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weinsteincounseling.com/","fqdn":"weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T16:54:30.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:30 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 284\r\nlocation: https://www.weinsteincounseling.com/\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0301 NC:000000 UP:\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":135464,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1016,"timings":{"blocked":442,"dns":34,"connect":131,"send":0,"wait":132,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/style.min.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/style.min.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-e45e\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14261)","md5":"5726c9a8a6aed931d306cfb0dac20f1a","sha1":"1cbd2aa08d66014eebe7823c45348841879ccb12","sha256":"197d1243eb1de6a7535549e7ab1df71b9b3310df9d68f791439353720f87027e","sha512":"1017d8ed55c31d46bc63fe02ecd2163a39665bb8fa6be270ce1e43b0c2a7d8966ae7bc385e7a3ed2a5147e01a5b1a435ea26b9fdac44a1989fab5be0200a9a7c","ssdeep":"1536:XJ6plDeBZBq2cBLhGI2HQSeptI2td7mtXtJtdcm:XJHSSepoD","tlshash":"ff43a862c7a1154c712bcb1deed96e64233cd113eb274edff216a119c38928e12e770a","first_seen":"2026-03-18T07:26:08.396461Z","last_seen":"2026-04-03T16:55:19.67629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/isotope.pkgd.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/isotope.pkgd.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1c3ff\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"faa00896271ef0209b135251fae975cc","sha1":"d90e0b97eac84766df020fd598001819a2b08aa7","sha256":"80f40c5331af5e353615e2781c93fe9fa4286dd81c41bba36d0bbff42ba92cc0","sha512":"931f1b79b8fa767557a6a23855b4c4a5726b5d7df67dbaab7b782bd60d82ba4b8db8ca5ee101257ca830181f9ab71c78b41bc0b519890a47904657ec9c023a27","ssdeep":"1536:1FsQPbFfOqmGICoMgcZxTVrVtXmKz+JHArx6XQDkM/SCrA+6CkVV3vLb0f3vSb4P:1JOIWoTOdV3vLb0f3vJsGsK1huoghjG","tlshash":"f5b395493ee221204457f1be9b8f7005f279c05b5219e948b98f97e42fa582841fefed","first_seen":"2023-03-07T01:19:24Z","last_seen":"2026-04-03T16:55:19.677213Z","times_seen":96,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/backend/js/quicktags.js?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/plugins/convertkit/resources/backend/js/quicktags.js?ver=3.2.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 19:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0738d-900\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"036d13798bc47458fe7325ee211befd7","sha1":"eed25c061c2e61bbd23cd1ef8a1df3ac8d9cfb20","sha256":"856fc46223975196eaf601ea452e9a3c65d5b57f9917c0c1fc2afe84c6b89792","sha512":"31331d2ffb6358e64886219d7bc792b0092223e61fc4ad25c640c7b0bc71302b3040685a951e0c0f3f7f9d8d074437b488030f7a7cfaa1651e7e4d1d50584157","ssdeep":"","tlshash":"d641015142bc2aaa425b6167ccac01d9972d4cb63e8343cfec3994e648ce09893d6b77","first_seen":"2026-02-20T11:36:23.880854Z","last_seen":"2026-04-03T16:55:19.678093Z","times_seen":76,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r.stripe.com/b","fqdn":"r.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"54.187.159.182","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:36.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stripe.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4E:12:89:06:4D:39:6B:F4:9B:D8:C9:19:66:13:EE:9E:F3:53:3F:62","sha256":"26:7E:20:10:BE:81:CB:76:85:82:92:20:FB:65:34:F3:6F:3C:FB:AE:74:9B:D1:E1:84:C2:9A:42:F8:A6:2D:2A"}}},"request":{"raw":"POST /b HTTP/1.1\r\nHost: r.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 5614\r\nOrigin: https://js.stripe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5614,"data":"client_id=stripe-js\u0026num_requests=3\u0026events=%5B%7B%22event_name%22%3A%22elements.controller.load%22%2C%22created%22%3A1775235275479%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A%221%22%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Firefox%22%2C%22version%22%3A%2267ff36ff76%22%2C%22event_id%22%3A%2206a9b229-78e3-4fd2-b61c-fdbaa2edf337%22%2C%22team_identifier%22%3A%22t_0%22%2C%22deploy_status%22%3A%22main%22%2C%22browserClassification%22%3A%22modern%22%2C%22browser_classification_v2%22%3A%222020%22%2C%22key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22key_mode%22%3A%22live%22%2C%22referrer%22%3A%22https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%22%2C%22stripe_js_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22stripe_obj_id%22%3A%22sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea%22%2C%22controller_load_time%22%3A%221775235275453%22%2C%22stripe_js_release_train%22%3A%22v3%22%2C%22wrapper%22%3A%22unknown%22%2C%22es_module%22%3A%22false%22%2C%22browser_timezone%22%3A%22UTC%22%2C%22react_version_variant%22%3A%22control%22%2C%22deploy_status_time_to_fetch_ms%22%3A%2286%22%2C%22deploy_status_fetch_failed%22%3A%22false%22%2C%22cdn_name%22%3A%22Fastly%22%2C%22cdn_pop_dc%22%3A%22HEL%22%2C%22frame_width%22%3A%220%22%2C%22controller_count%22%3A%221%22%2C%22has_link_auth%22%3A%22false%22%2C%22schema_validation%22%3A%22skipped%22%7D%2C%7B%22event_name%22%3A%22elements.light_experiment_exposure%22%2C%22created%22%3A1775235274962%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A%222%22%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Firefox%22%2C%22version%22%3A%2267ff36ff76%22%2C%22event_id%22%3A%22d17049db-37c7-42cf-9197-3cc9117e2299%22%2C%22team_identifier%22%3A%22t_0%22%2C%22deploy_status%22%3A%22main%22%2C%22browserClassification%22%3A%22modern%22%2C%22browser_classification_v2%22%3A%222020%22%2C%22key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22key_mode%22%3A%22live%22%2C%22referrer%22%3A%22https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%22%2C%22stripe_js_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22stripe_obj_id%22%3A%22sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea%22%2C%22controller_load_time%22%3A%221775235275453%22%2C%22stripe_js_release_train%22%3A%22v3%22%2C%22wrapper%22%3A%22unknown%22%2C%22es_module%22%3A%22false%22%2C%22browser_timezone%22%3A%22UTC%22%2C%22react_version_variant%22%3A%22control%22%2C%22deploy_status_time_to_fetch_ms%22%3A%2286%22%2C%22deploy_status_fetch_failed%22%3A%22false%22%2C%22cdn_name%22%3A%22Fastly%22%2C%22cdn_pop_dc%22%3A%22HEL%22%2C%22frame_width%22%3A%221%22%2C%22dimensions-os%22%3A%22Windows%22%2C%22dimensions-browserFamily%22%3A%22Firefox%22%2C%22dimensions-deviceType%22%3A%22desktop%22%2C%22population%22%3A%221%22%2C%22version_id%22%3A%221%22%2C%22is_qualified%22%3A%22true%22%2C%22variant%22%3A%22control%22%2C%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22experiment_retrieved%22%3A%22sjs_light_experiment_react_version_17_v2%22%2C%22project%22%3A%22stripe-js%22%2C%22schema_validation%22%3A%22skipped%22%7D%2C%7B%22event_name%22%3A%22elements.init_timings%22%2C%22created%22%3A1775235275580%2C%22batching_enabled%22%3Atrue%2C%22event_count%22%3A%223%22%2C%22os%22%3A%22Windows%22%2C%22browserFamily%22%3A%22Firefox%22%2C%22version%22%3A%2267ff36ff76%22%2C%22event_id%22%3A%22cc261590-3fa9-45b2-851a-4b7fbb7d17a2%22%2C%22team_identifier%22%3A%22t_0%22%2C%22deploy_status%22%3A%22main%22%2C%22browserClassification%22%3A%22modern%22%2C%22browser_classification_v2%22%3A%222020%22%2C%22key%22%3A%22pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN%22%2C%22key_mode%22%3A%22live%22%2C%22referrer%22%3A%22https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%22%2C%22stripe_js_id%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22stripe_obj_id%22%3A%22sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea%22%2C%22controller_load_time%22%3A%221775235275453%22%2C%22stripe_js_release_train%22%3A%22v3%22%2C%22wrapper%22%3A%22unknown%22%2C%22es_module%22%3A%22false%22%2C%22browser_timezone%22%3A%22UTC%22%2C%22react_version_variant%22%3A%22control%22%2C%22deploy_status_time_to_fetch_ms%22%3A%2286%22%2C%22deploy_status_fetch_failed%22%3A%22false%22%2C%22cdn_name%22%3A%22Fastly%22%2C%22cdn_pop_dc%22%3A%22HEL%22%2C%22frame_width%22%3A%221%22%2C%22element%22%3A%22outer%22%2C%22match_frame%22%3A%22true%22%2C%22until_first_create%22%3A%22623%22%2C%22until_first_load%22%3A%221169%22%2C%22stripe_create_duration%22%3A%22546%22%2C%22stripe_js_init_duration%22%3A%2229%22%2C%22stripe_js_load_duration%22%3A%22684%22%2C%22resource_timings-stripe.js-raw_size%22%3A%22974963%22%2C%22resource_timings-stripe.js-transfer_size%22%3A%22225173%22%2C%22resource_timings-stripe.js-duration%22%3A%22109%22%2C%22resource_timings-controller-with-preconnect.html-raw_size%22%3A%22745%22%2C%22resource_timings-controller-with-preconnect.html-transfer_size%22%3A%221691%22%2C%22resource_timings-controller-with-preconnect.html-duration%22%3A%2247%22%2C%22controller_init_delay%22%3A%220%22%2C%22controller_init_strategy%22%3A%22eager%22%2C%22controller-resource_timings-shared.js-raw_size%22%3A%22885328%22%2C%22controller-resource_timings-shared.js-transfer_size%22%3A%22188474%22%2C%22controller-resource_timings-shared.js-duration%22%3A%2288%22%2C%22controller-resource_timings-controller-with-preconnect.js-raw_size%22%3A%221209374%22%2C%22controller-resource_timings-controller-with-preconnect.js-transfer_size%22%3A%22255070%22%2C%22controller-resource_timings-controller-with-preconnect.js-duration%22%3A%22120%22%2C%22schema_validation%22%3A%22skipped%22%7D%5D"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://js.stripe.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\nx-stripe-proxy-response: upstream\r\nx-stripe-server-rpc-duration-micros: 2848\r\ncontent-type: text/plain\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1222,"timings":{"blocked":533,"dns":0,"connect":172,"send":0,"wait":172,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sessions.bugsnag.com/","fqdn":"sessions.bugsnag.com","domain":"bugsnag.com","tld":"com"},"ip":{"addr":"35.190.88.7","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bugsnag.com","organization":"SmartBear Software Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Mar 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:43:05:26:C7:B2:0B:00:7F:AC:D6:13:6E:36:0F:AD:3E:09:1B:00","sha256":"46:0D:F3:4C:32:52:70:A6:46:14:83:77:85:69:B2:AA:56:A0:DC:69:7D:E6:44:E8:32:FC:95:B0:28:00:7F:DC"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: sessions.bugsnag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At, Bugsnag-Integrity\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":56,"dns":1,"connect":12,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sessions.bugsnag.com/","fqdn":"sessions.bugsnag.com","domain":"bugsnag.com","tld":"com"},"ip":{"addr":"35.190.88.7","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:35.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bugsnag.com","organization":"SmartBear Software Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Mar 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:43:05:26:C7:B2:0B:00:7F:AC:D6:13:6E:36:0F:AD:3E:09:1B:00","sha256":"46:0D:F3:4C:32:52:70:A6:46:14:83:77:85:69:B2:AA:56:A0:DC:69:7D:E6:44:E8:32:FC:95:B0:28:00:7F:DC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: sessions.bugsnag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nBugsnag-Api-Key: cd87d7479ba405250a10f30eb9673844\r\nBugsnag-Payload-Version: 1\r\nBugsnag-Sent-At: 2026-04-03T16:54:34.877Z\r\nContent-Length: 447\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":447,"data":"{\"notifier\":{\"name\":\"Bugsnag JavaScript\",\"version\":\"7.25.0\",\"url\":\"https://github.com/bugsnag/bugsnag-js\"},\"device\":{\"locale\":\"en-US\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"orientation\":\"landscape-primary\",\"id\":\"cmnj58woj00002a60t4jqo8hw\"},\"app\":{\"releaseStage\":\"production\",\"type\":\"browser\"},\"sessions\":[{\"id\":\"cmnj58wot00012a607wv6b8p7\",\"startedAt\":\"2026-04-03T16:54:34.877Z\",\"user\":{}}]}"}},"response":{"raw":"HTTP/2 202 Accepted\r\naccess-control-allow-origin: *\r\nbugsnag-session-uuid: cd388882-e706-49b9-b6f6-352cc8c2ddbc\r\ncontent-type: application/json\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-length: 21\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1807ffa1d44e667592a0f91c668ba65b","sha1":"4d48849fa0f6917c9c57ed958680e9a1e722382b","sha256":"0ba7c0356149946bf0642fab4ef85b95e7090f6f785d0fb84323d0c442e5190a","sha512":"d97f38a96645df4cffe128e98d6a27b145b1d8c45501710d630a2551363383aeaf795d015fac75145f110f9fd58ae08e325cfc71209700bccd48cba17845582c","ssdeep":"","tlshash":"9d7000002a0008a008800880002002a0aaa02aa0003a20c0c82c002008808c08008000","first_seen":"2023-04-05T03:50:10Z","last_seen":"2026-04-03T18:25:49.891625Z","times_seen":17086,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/WEINSTEIN-COUNSELING.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/WEINSTEIN-COUNSELING.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 11099\r\nlast-modified: Wed, 30 Dec 2020 20:19:57 GMT\r\netag: \"5fece0ed-2b5b\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 327 x 180, 8-bit/color RGBA, non-interlaced","md5":"966a458b63b57c2677533d7e62bde6cc","sha1":"ee37e7dcaf892fff8f1b1a226d8027fdae7f1c32","sha256":"e7d19c6c9e4db83b5a98a07ee1ea087b4ccc6532671ec6210a73d9c1116e53e7","sha512":"350f4cc3857761faf48958f399afd6d124b786abbe6828fa6f99a958091389d3871d9a898c1d199820cdc9576f31817d47490c9b2675f27c49f0b25e9f4e627f","ssdeep":"192:I4ZvuDu9jogxLpG7QXtOc3i3/zq5RUVyd8sSD8FKgi/AQBZeUrem:I5uVxFGatOWsnXD8N/QbeU3","tlshash":"1d329ea0fdc4baaec643513f2dd7078c2197c72ee05225baa67e44513b7f92809dd309","first_seen":"2026-03-18T07:26:08.414758Z","last_seen":"2026-04-03T16:55:19.678604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/nivo-lightbox.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/nivo-lightbox.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-35e0\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"05d8c04c7cffa68231d7eb0b4ef8ab3b","sha1":"7d9365530d35d557ab285888916e249424561e9e","sha256":"48a0dfcb35728a50647837412515149200110486d731dade126cbfbd8e24540d","sha512":"a2a022f7d5374825ba3caf173fba16c24667d2a4ae5f1518674d38c48c5cd4170b5a7f8232ca6a91aeefaf11b091cddd033e1e6ee567b110648ff604f5090a84","ssdeep":"192:49kQXX/0PwymfvAFCeOOzWJcMrcEckmIox:E8Pwy7ajrcEcR","tlshash":"de52139dbb7e011581f7305a1abf92b4372d413f9801a439beacc5c41fc66496ea3e64","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.679682Z","times_seen":386,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/total-custom.js?ver=20150903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/total-custom.js?ver=20150903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1d49\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7d80a198633eca0c8903b0eb4bf0ed1f","sha1":"289a226a458be3d8dc55f4ebfda57b293d67b3d2","sha256":"1033ac0944fabe80e8969d922ea9708dbbfad1224d3ab29b8d6bcd188d5ad5c9","sha512":"a740e243c514d957e1940c798099c18e54becb9b9d396f057483adf583d64f9a5a439e5024fb586cc3db9506459187ea583d99d47511facd7d5a4c7fd490a55b","ssdeep":"192:3jPfdEMBfceDW24WNepuihzgQlQhEwa/7C5:7fdNBfceDW24g6L1q","tlshash":"73f18506b6f97d35b073323bea7fa0043d5a601b694ade40bacd49610f9125cb5736dc","first_seen":"2025-12-10T08:05:18.742928Z","last_seen":"2026-04-03T16:55:19.680237Z","times_seen":3,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery-3.1.1.slim.min.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/jquery-3.1.1.slim.min.js HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-10ebd\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32067)","md5":"550ddfe84a114f79a767c087df97f3bc","sha1":"310bd0c04196573315c2e8446776685ac2961724","sha256":"fd222b36abfc87a406283b8da0b180e22adeb7e9327ac0a41c6cd5514574b217","sha512":"b6a9146ffe380a32c89d48baf900dd5e346b0d603b8afcfad070970e56bdc744e8a8b053c2ef8a3107f4a3c2bdd11ee470e05557f542ffede5ff54468ee186c4","ssdeep":"1536:dNhEyjjTikEJO4edXXe9J578go6MWXqcVhzLyB4Lw13sh2bTQKmPNsvDU8Cur:Dxcq0hzLZwpsYbIyvDU8Cur","tlshash":"4263c5d9b2d67052db7730b850bf550bf07a98dab44c8d60e098c8e47d78a89817bf2d","first_seen":"2023-03-07T01:29:00Z","last_seen":"2026-04-03T16:55:19.681177Z","times_seen":444,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Nov 2023 01:22:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654c3472-1590\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-03T19:30:20.028773Z","times_seen":147211,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/Untitled-design-23.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Untitled-design-23.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2506259\r\nlast-modified: Thu, 31 Dec 2020 20:19:04 GMT\r\netag: \"5fee3238-263e13\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2506259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"cfbbdce9321b6e477c687301198a14e7","sha1":"045ce09dce55f5ffa35aaf8f0b98b6a615513540","sha256":"4cea1a937e7b75c9d0d7c19e9dcee6408dd03ed665e4879e4fd3ac54444328de","sha512":"5d48d2de22a70a0a9b288d0f706e8efbb90539838c08d057992021f6c9c6c6ddb62a4f769b90df47d8d4fc84ee55aed0de016d0c42669c250175566c538e5351","ssdeep":"24576:YM93/5jRfuaav4GoPpCN9fvyGthE5msRpLrxK5wdmmh99UOGW5:Ys3/5jRGD4DPpO93yyhE5mChrxSElhbx","tlshash":"5f25334d4cdb16bbdd2664f46f3c587007cdbe1f66b9cd488e4ed6bd8008582b06a3a9","first_seen":"2026-03-18T07:26:08.497638Z","last_seen":"2026-04-03T16:55:19.682517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"member.psychologytoday.com/verified-seal.js","fqdn":"member.psychologytoday.com","domain":"psychologytoday.com","tld":"com"},"ip":{"addr":"52.17.44.125","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.psychologytoday.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 23 Aug 2025 00:00:00 GMT","end":"Sat, 19 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:BA:CD:AF:88:06:2E:49:EB:73:4B:22:F5:4C:C5:79:CF:6D:13:C6","sha256":"EF:C1:E1:94:D5:AA:59:14:C3:28:FC:C7:2F:62:DF:3C:2F:AF:10:4B:43:4A:1D:FF:23:ED:E7:D3:06:22:8E:61"}}},"request":{"raw":"GET /verified-seal.js HTTP/1.1\r\nHost: member.psychologytoday.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 03 Apr 2026 16:54:31 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: Apache\r\nCache-Control: no-cache\r\nLocation: https://d3mmydk2yvkj9n.cloudfront.net/prod/verified-seal/latest/verified-seal-cb.min.js\r\nVia: 1.1 memberweb\r\nX-Country-Code: NO\r\nX-Region-Code: 03\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":128,"dns":53,"connect":32,"send":0,"wait":40,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/chunk.30e556781d51934765db.css","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/chunk.30e556781d51934765db.css HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 193505\r\ndate: Fri, 03 Apr 2026 12:32:59 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:32:38 GMT\r\netag: \"24f5a382bcf4ce83e2d954373c3d62ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\ncontent-encoding: gzip\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: SXz6qrdrBHv_BspI7I-CQFONc86Yk_LZgLpAXbYOCeOIETZO4SsSyg==\r\nage: 15696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":806926,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (38398)","md5":"5f4c4e826701b686911437a1a0c7ce2b","sha1":"8dfc203c80b367383a004785c21ddcd16114fb7e","sha256":"e8cb36b3c484947857611b6b93a86727937798627cd78b102ceb50379291d67b","sha512":"55dce26c84017f16f4b704e2f9560ae357dc83e34306ad143ddd82c539270b196d9dfeab525f732ae9dfc98606f1a50fbc1649a1c2bf279827968d4d7b9a1f8e","ssdeep":"24576:+yPRqnCvdt4RJxC+C/Jqbk9Or6ejkcCenN+XycMf3k8MA4ZcPBv+10vb9Xk:a6ejkcCenN+XyceMA44Xk","tlshash":"aa053ba1f191213fb55b863ea0a0f95d77558642c9936effb802b2b8cbc91e6057370c","first_seen":"2026-04-03T16:55:19.683897Z","last_seen":"2026-04-03T17:38:14.196702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2020/12/cropped-Copy-of-WEINSTEIN-COUNSELING-192x192.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:33.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/cropped-Copy-of-WEINSTEIN-COUNSELING-192x192.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8999\r\nlast-modified: Wed, 30 Dec 2020 20:22:11 GMT\r\netag: \"5fece173-2327\"\r\nexpires: Sat, 03 Apr 2027 16:54:33 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0e7b3a0601d0a84b6e6c47154f6bef61","sha1":"aadb05337790a7f557ca9fcef458bf98a094973c","sha256":"16cd4e3cf63ad206af7b5b5ab07c436a8d734b57f48071fa4f13928c81f8d290","sha512":"bcd82c31277e4cc2cbcce821808fec86ead4f2c6237321d465be442c03c527767e0d169612f9c3c01a1597284399a42eb9081d494bf11be95eb8fcea25a39c49","ssdeep":"192:mX6Bpgy4DGYIYmDpieE+gLukIhh5canr8mkA+t2nrIhQQAnY:66DgyYMViewi35Xrw28+hY","tlshash":"8202afa64c328dabd7051882b4727b7313928819f522d42ed1705f3fd77587372c29e5","first_seen":"2026-03-18T07:26:08.406155Z","last_seen":"2026-04-03T16:55:19.688542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-cdn.simplepractice.com/assets/chunk.30e556781d51934765db.js","fqdn":"widget-cdn.simplepractice.com","domain":"simplepractice.com","tld":"com"},"ip":{"addr":"54.240.174.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget-cdn.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Feb 2026 00:00:00 GMT","end":"Mon, 08 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:4B:D4:30:7B:B2:7D:43:A2:24:77:3E:94:5B:97:37:20:E6:CC:CB","sha256":"64:EA:5D:D4:B9:C5:E0:6C:5E:54:5E:7B:E6:BF:4F:72:CF:93:26:E5:4E:95:36:B3:AE:FF:73:E7:67:1E:4A:62"}}},"request":{"raw":"GET /assets/chunk.30e556781d51934765db.js HTTP/1.1\r\nHost: widget-cdn.simplepractice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:32:55 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:32:38 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=63072000, public, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\ncontent-encoding: br\r\netag: W/\"95eac746011aee4056d260c6dadb8cc3\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ag38lvelJiwSZg3ArDRC8iHAunAcM3ThPOwGKbWpOtemKxUYM5pxWQ==\r\nage: 15700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4514462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65452)","md5":"e27604b95eef920b025dda3099e0d225","sha1":"b99cc38d814445c58c94cbc434a556c9be82790b","sha256":"4c37fe9bf3ced664775609214bd2b3947fd666c93524a6e5432556d952315edf","sha512":"e2bae9874b7f35d7ef99f53ad424499199864ac660c7f30db1bbf800d5f99932047f4f996bee1fc113bfea590cac11a6ec6b84fd4507255372fd78b1c6398fdd","ssdeep":"6144:D7DSf5rBbrL4u7XFOdPqf3jE8sP3OjvH0reC/XtZKb0YQdkJM7CiKCURsC5uJM4r:5EEBT8fUFP1AT4LL47SeivYzWbF","tlshash":"9725a4ebe1796c79be88c280de31e44e6dac211a620a76f476dc94b82f74cc30167757","first_seen":"2026-04-03T16:55:19.690342Z","last_seen":"2026-04-03T17:38:14.185554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/controller-with-preconnect-4a008e08138b5012238eb5b2faa1a1a0.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","date":"2026-04-03T16:54:35.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/fingerprinted/js/controller-with-preconnect-4a008e08138b5012238eb5b2faa1a1a0.js HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 254359\r\nlast-modified: Fri, 03 Apr 2026 01:59:51 GMT\r\netag: \"4c2fb9fb172867ff72fe8ad6d01397df\"\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 53115\r\nx-request-id: 1ad6bf6f-878d-4805-ae91-c1355ab3ad16\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 3772\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1209374,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63239), with no line terminators","md5":"8d91b15d531bd58cfa15cb110dad2175","sha1":"393deba5fe1164a84da74f3f9583762cc65bb140","sha256":"eb20ce4740ebe616414e3cda75d198ad6ef55de82514441900dd35574d9cc0c8","sha512":"247a0b87ef8180412de4a72925b22e7c1a04c392aa299dc9ae59005ef3d8a3e3395b0ac841ebdb10bdecfaf81037e8a8f2803e1dc388175ba3825d19a2bdd33b","ssdeep":"12288:va9lLlj8a6lnTYQoHfVBZ4BHNvX2EduGAskE8n0plrDo:vaJ8D5oHfVBZcvmEduGAskE8n0zo","tlshash":"85354b8db697b42653d7a529e03b500eb33d6c54314e0801f6a6cdda683ec97f533ba8","first_seen":"2026-04-03T03:04:08.259785Z","last_seen":"2026-04-03T17:27:06.306759Z","times_seen":106,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/muli/v34/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.weinsteincounseling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18492\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:01:20 GMT\r\nexpires: Sun, 28 Mar 2027 02:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nage: 571992\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18492, version 1.0","md5":"cc200ce588500e57e211e23817049653","sha1":"34fd8a8d7bbf0870cb243878511254759d0b8989","sha256":"9144b23ca2d18336e13ede1fbf7120fecf9b5068248370b0d37e459d9a915953","sha512":"2379be62da34371efd9d17cc864ecb9b064bb788d9ebd599a9289711fcbd1f734a34baf137699173ad84fd554e1c8a86cc900f77f001fb548d7df7f86973b95b","ssdeep":"384:p8OX/YI2uHkpehSKSL0QESJZ4YsL7oPsW8HfaZDJFbH/9c1l:p5b2uEpehpxQZ4KsW8Hf+jV+","tlshash":"c182d0e4295b8d1fd5c5b33f22d871cce565023ce82b98295d6389bd032e8b6f508c58","first_seen":"2025-09-09T02:02:00.636298Z","last_seen":"2026-04-03T17:00:28.090987Z","times_seen":1524,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":101,"dns":1,"connect":21,"send":0,"wait":22,"receive":6,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","fqdn":"spwidget-weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:33.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2E:F5:AB:69:71:F9:8D:8F:07:42:21:4A:87:F8:CD:10:6D:81:A1","sha256":"0E:77:1E:D0:53:65:9D:8E:21:52:EE:85:B3:9B:B2:B0:21:01:D5:2F:CE:A3:4D:5F:10:C2:75:36:70:6B:76:37"}}},"request":{"raw":"GET /widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176 HTTP/1.1\r\nHost: spwidget-weinstein-counseling.clientsecure.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.weinsteincounseling.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlocation: /widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176\r\nset-cookie: simplepractice-session=MBviOGsiT8hCgqtzJjrsgspfAy%2FTuzfg9vX5Slo%2FTR13YmwXuHNasOXsNQmDdawK0yg0cy0XoyG8qt80DSGa3JpXF7Nci5m3kaV2L6BWBBCAe5JGuN1BmHB0QQaE4z1kyw3nBb4IoFGS6nLHeXux3dcPEh1BsMH9uU396KRewCWTVWlw9ADux0U5iFKTyk1P9b89W9bM%2FEWo945hJbdNG8s%2BVUIvtDwz21yIvlQHydI5tjq7lXeUHrLmnzawsg%3D%3D--yL8WPhPklul3%2Bf%2BK--%2BMsN%2BZLIczl7rzhfsFtnoA%3D%3D; path=/; secure; httponly; samesite=lax\ntracking_enabled=false; expires=Sat, 04 Apr 2026 16:54:33 GMT; secure; path=/; SameSite=None\r\netag: W/\"7d71-395MRg8/7j/Y48QhGrjnBNECpFU\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"BugSnag","description":"Bugsnag is a cross-platform error monitoring, reporting, and resolution software.","website":"https://bugsnag.com","common_platform_enumeration":"","icon":"BugSnag.svg","categories":["Analytics","Issue trackers"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":32113,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10791)","md5":"61e82abdabc162abf3a83ec921e8f03c","sha1":"dfde4c460f3fee3fd8e3c4211ab8e704d102a455","sha256":"e9d6581d07c574efe989cde17001441829f94c1e86463dcdb1b968b5e672f9d5","sha512":"741ae2bea2b29ab37f9c1e83f61d385471d1abc8ea7873e8e7cd1ec2993b5bab28e978c08ba29f72ea2a653a442cf7185c49a117071db0bcfb9e19578f1f00b7","ssdeep":"768:s3XUUcZIe1Dv+Zmu8hSn5SuvOg19JS08xVXQ:AZcT148hFLXQ","tlshash":"03e23ae8aa70347c528303baded47e4927353d3ba1a87a04fcdc451c57eadca592724b","first_seen":"2026-04-03T16:55:19.696034Z","last_seen":"2026-04-03T16:55:19.696034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sessions.bugsnag.com/","fqdn":"sessions.bugsnag.com","domain":"bugsnag.com","tld":"com"},"ip":{"addr":"35.190.88.7","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bugsnag.com","organization":"SmartBear Software Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Mar 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:43:05:26:C7:B2:0B:00:7F:AC:D6:13:6E:36:0F:AD:3E:09:1B:00","sha256":"46:0D:F3:4C:32:52:70:A6:46:14:83:77:85:69:B2:AA:56:A0:DC:69:7D:E6:44:E8:32:FC:95:B0:28:00:7F:DC"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: sessions.bugsnag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At, Bugsnag-Integrity\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":62,"dns":1,"connect":13,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/uploads/2021/06/Untitled-design-5-300x102.png","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:35.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/Untitled-design-5-300x102.png HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nCookie: _ga_0Y26J6BHGJ=GS2.1.s1775235273$o1$g0$t1775235273$j60$l0$h0; _ga=GA1.1.714709847.1775235274\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 21086\r\nlast-modified: Fri, 04 Jun 2021 16:52:22 GMT\r\netag: \"60ba5a46-525e\"\r\nexpires: Sat, 03 Apr 2027 16:54:35 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 102, 8-bit/color RGBA, non-interlaced","md5":"55c97e13286447bfdf1940319725424a","sha1":"87508f831513c827c64bd7236af15227a2237ad3","sha256":"54e579072bc8a1afce0fc1013bc047af167a19c555500d90267171dc602cea5f","sha512":"cf2926ee511e71bd9235edb4605abc2c3b79264c0cb350393dc135cc352945f91ad58736b5356a1648e929017b4178c47c7817a5716ec632b9dd6b20ca73392b","ssdeep":"384:HQhuwpvaSyjj3asCm975moPgcmHVc25PlXLCft3Fk7BffbQfaENt6:Hs5pSSyjj3ahHo6Vr5PlO9FUVTYaQt6","tlshash":"7a92d0fa5c5e2a20fe88ccc1d5930ec469ca2bc21434bb8b5ff66db86806f475d54369","first_seen":"2026-03-18T07:26:08.450955Z","last_seen":"2026-04-03T16:55:19.697702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css-new/templete.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css-new/templete.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1395b\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80219,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"7126802387293fb925325517441174ac","sha1":"ae23b1a15f82fa2d70d0556d4d9c4eb64928757d","sha256":"58e58057400a414c11a7a580e875768365115cebb6c14386d8360215bbdde538","sha512":"5677bf978b642af96882b6ca2db230abb579376fc8b96658e2f42f4a5f4afc1d05cdb083dc2ce93a692158d9922a52788a731ba9eefcc29fed0747bcab2d9146","ssdeep":"768:FX0l67KxG+LtU3mKrBatsp8fP2DBhQUUa3/J4V1XgPXLHu204VKfBGrRMs9vYU2D:OeM2DBS8J04VKfBGr49SPvW","tlshash":"7573b568e925200d7326a9a4f7f16f94fe2c9047df0715f9f3a12219c7e609c6272bc9","first_seen":"2025-10-31T01:20:18.996643Z","last_seen":"2026-04-03T16:55:19.699177Z","times_seen":5,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krystan-rose.ck.page/47112975da/index.js","fqdn":"krystan-rose.ck.page","domain":"ck.page","tld":"page"},"ip":{"addr":"104.21.41.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ck.page","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 11:38:49 GMT","end":"Tue, 19 May 2026 12:34:14 GMT"},"fingerprint":{"sha1":"31:FE:E6:FE:44:C7:ED:27:D6:F2:D6:E6:63:E5:75:89:79:82:A6:3D","sha256":"F2:C1:F5:F6:D3:0C:A6:A7:66:03:A6:42:54:8E:FF:FF:B7:BD:04:25:89:86:46:98:5E:ED:3B:D2:B0:44:CA:BC"}}},"request":{"raw":"GET /47112975da/index.js HTTP/1.1\r\nHost: krystan-rose.ck.page\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-id-2: zNh8HOIhKaQNR4Ve+fjzzJ6jpnv2XBKMzBWcX3fGrYcR8U3zCEBXVHEQqWxZCEgDP4n/38ehUKtdEg2qWRlO0vtggauZXbYw\r\nx-amz-request-id: 81Y5822MZJT814K5\r\nlast-modified: Thu, 31 Dec 2020 19:52:33 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gA8H2n7%2F4A3UEjfGSY8MZmTl46Yaax2jin96HrAEtnttlxzbZJsHqN0bTQsjTSYUhCF8IYqrKyvwyOOwtoOSg9CE8tvFl4d4nbxZiv4S4tt8706ejcQvKsw6KCfNNejmi5s75VXH5Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"0d5f4bad9cccd18e76f7964bb7de51f3\"\r\ncontent-encoding: br\r\ncf-ray: 9e69988028c18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36547,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32801)","md5":"0d5f4bad9cccd18e76f7964bb7de51f3","sha1":"2c052c149184bcc0518ea98c6a32cdcc8c25dec8","sha256":"956e4b669246218a9e70c229f97f86c0fc2c233991b1eab120fe4bc6265f4695","sha512":"82c4e677b4543d833d640e7682a73252659be4c320dde02efb16304863b20e446a8e89fd8c2d1d3d394b4f7037fa3d57a6beda4ff1fb6a1c8e8de7ca5993da04","ssdeep":"384:7+C268GS2DTanPJhJrJNJIJUJhJCJrJ0J5YJgLJFQOeRtj1AXU6juWn4HSQJDV4D:7+C2MS2HaHHQOeRtjilaHfPCF","tlshash":"94f2a6e932fc6be16813c737a4b600a6725c79b1270207948bec6966b300dfc6459fcb","first_seen":"2026-03-18T07:26:08.43029Z","last_seen":"2026-04-03T16:55:19.700414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":24,"connect":3,"send":0,"wait":188,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.bxslider.js?ver=4.1.2","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/jquery.bxslider.js?ver=4.1.2 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-c58d\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b257e0969014adf4d5836b545fd6ccfc","sha1":"738b4da885a7c17abc896f2ef682a186fcfe07bb","sha256":"bddbba35635904eca1d7f9edc74bdbcba04ec0f5a16286fdbd8f78fb0f7e0c6f","sha512":"0eaf824d4a2dd6a487778e2723d68c30b11904a33f55f2846476dc6234f5c0d52247c0bd906b9db8e4530487fd6988cd3d6660fc2fcc4168ca6350b78ff91d1b","ssdeep":"768:WX6/gdowzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOj:G6OowOx1l/L2dy5oMnfNWVqCivA","tlshash":"4c335245e32c227e5566126cb28dcec4d7fd8236c82694b6eef0dd3ce18096901af9d6","first_seen":"2023-03-07T01:18:56Z","last_seen":"2026-04-03T19:28:17.338722Z","times_seen":1032,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3mmydk2yvkj9n.cloudfront.net/prod/verified-seal/latest/verified-seal-cb.min.js","fqdn":"d3mmydk2yvkj9n.cloudfront.net","domain":"d3mmydk2yvkj9n.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /prod/verified-seal/latest/verified-seal-cb.min.js HTTP/1.1\r\nHost: d3mmydk2yvkj9n.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.weinsteincounseling.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Oct 2023 20:20:15 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Fri, 03 Apr 2026 02:00:38 GMT\r\netag: W/\"cb9764d22cdbc8f8f87d23415d8bd052\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: G8YguHrNCYcjfcNBuGSlD_a9xzm9z2OXdQqBpMRq2TUQHpIGzrBJ3g==\r\nage: 53635\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1963), with no line terminators","md5":"cb9764d22cdbc8f8f87d23415d8bd052","sha1":"d2561376ffcdeb4100455df7519d43ef2698aa09","sha256":"f35876ecf9a2fad74c8c5576e354c5fabc4fa88f7b532e233bd6084a9e5f945f","sha512":"626e6d96c16656b277d3ab93919b108ff36251bef0fcae65c2999cca73d3fb4198c5009cb9cb4042fb5bfbd917995a1919f187d0e262f31d6e28b3ff8ead25b0","ssdeep":"","tlshash":"4a4174752f9478bb132310f98a2fa14ff5749c785645c50082a8cabafca4d9d2171fb9","first_seen":"2023-11-21T12:02:11Z","last_seen":"2026-04-03T16:55:19.703091Z","times_seen":106,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":31,"dns":35,"connect":1,"send":0,"wait":3,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/ HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Apr 2026 02:35:11 GMT\r\netag: \"761c9968194a8654cd582af3726ed6f9\"\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\nvia: 1.1 varnish\r\nage: 2\r\nx-request-id: 3b9bcc39-1bbc-4659-8b21-ce24258aa319\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4681\r\naccess-control-allow-origin: *\r\ncache-control: max-age=120\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 224451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":974963,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"761c9968194a8654cd582af3726ed6f9","sha1":"83ea085861b44549c7d0b46c9643939b8e3c4721","sha256":"d656ad4e346166b5ceb623490a8a87a76730222c97835ef38e20a1cb8cacccaf","sha512":"0a6650dd5ef59d2ba80e3e7a25fc0be339281b6ccb807554c1b7e66166e6df9c460b215c8ff7e4fb6cf5f863afa07c5c796fd155a2a3a1f0130f369a4acfd20c","ssdeep":"12288:kFyN5mLUXHCRDbIO14WzPsyxrRzIsu44mBX+D+AH+eoYJMdLQ23DankqhnaSUM83:kFmeRvIO1DraRKOV9AVIAvES2aLD","tlshash":"2d252a89b59bb42143db7169a13b610eb33a6911350d4010f596dedc2ebee9be033f6c","first_seen":"2026-04-03T02:34:17.660156Z","last_seen":"2026-04-03T17:52:28.998284Z","times_seen":354,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":36,"dns":1,"connect":19,"send":0,"wait":14,"receive":36,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/wow.js","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/wow.js HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-3cbb\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ea81e4551d35835e87309a679fa22df4","sha1":"6ecb988432bae56dd5a710cc32fa03847670a98f","sha256":"f11c99e3d36695925003b17b9faaecf2339bd1a9b045bad6da6bd4a7f562557a","sha512":"6e00b8f29a9a090c781a838f0e64c8f98d48c0c691eeb37c9628155ca5c7a2b8ddb9732bc5c96239e8ed0790681ff79f97f93a494d839bd2d45c2ff228f2f3c8","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0ID:cRZmU+GeKrAq6aItnefKh","tlshash":"ca62cc883eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa053897fafb8","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.665497Z","times_seen":566,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/owl.carousel.js?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/owl.carousel.js?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-1ac95\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44c60ba8339e0c4431bca54885fed7d9","sha1":"440e2ee72523ba194cc3f6ef11615f546318a058","sha256":"8119f864951b9c0749670989a02ededc2b282a0c491b57e6607217ec597fbdd3","sha512":"88299fff84a76874be02ced8887f516b6a257207a671dc4b12eeda7cc12946230f21ba2b7efe2bcea19d746a4e61b27431ee0023e18cb9d86c32097c21be164d","ssdeep":"1536:oW3i6KkMcB/QGhTfXd53NDp0Qdgo2hj3Mx1oi9C9RWR:oW3Tv/QGBfXd1Hgvhj3CVmRWR","tlshash":"7cb3610977f91016812731385f9f2246f236810f9915aa4c3dad93ec5fd9a7842baff8","first_seen":"2023-03-07T12:11:48Z","last_seen":"2026-04-03T16:55:19.705714Z","times_seen":119,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/frontend/css/frontend.css?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/plugins/convertkit/resources/frontend/css/frontend.css?ver=3.2.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 19:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0738d-2a5c\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10843)","md5":"4a822672bcae75a01eefbe6fdf884db4","sha1":"80516f8d2dba0d425b837f907362df426a67407a","sha256":"eb61d61210b374d7639704d36e3d970184be02a767534a5a1359e6b9deabcd8e","sha512":"19c10552b8eaf2ffbb8ced4ed0dccc9c982dce3b5a83c83b68fff5308d23f4ee173a959885ab9c58d8891095212389e9f01a7f6d2ce59bfd643f5e6fe52255f7","ssdeep":"192:1QX1VN4ekOEXrD6kOyqlkw8qZwl4jfjFN9FZrER2nH:Klw5X6/yqlF8J2f5N9gR2nH","tlshash":"56225470b8641d68bf77803ae054268eb304a2a7cad747f899e041e4c7c8dde51f679a","first_seen":"2026-03-01T20:54:48.999681Z","last_seen":"2026-04-03T16:55:19.70663Z","times_seen":100,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.colorbox.js?ver=20160809","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/jquery.colorbox.js?ver=20160809 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-71f1\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29169,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"eb79fa295d1ded56e7356a4f75e751ca","sha1":"1f097568c83bded0bc5b1384dae4ff93c847fe28","sha256":"c5a310590b84ddb8c45b12b32267c95961a7fc4f7bbd13828113d00abfdd24b4","sha512":"85f60176f3eca5bb373a3ddc57618d9c931fdc6a519f77fd6f0eb3083257cd32e8f6adb3f8322e7b97a50b5a4cb533c3b7eb4f3252edc22bfc2b93b49864e567","ssdeep":"384:43gsDe1DrzIZNBHCDfwzk84RM4mNjzRT89995L5eqzc:cbDe1/eizONT89feB","tlshash":"acd2a6b4e77e261e803a107dd84d43cd123f81721526b9bbfca4466c98e05ae4369fed","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.707325Z","times_seen":388,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/js/jquery.nav.js?ver=20160903","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/js/jquery.nav.js?ver=20160903 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-14ba\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e25036ba009029c7c5724a0d02d6bdd7","sha1":"55c51a27dd6a15505ebd280856b668d66d2af275","sha256":"a243c29ea5c8157385fb38de57ab177b84dee432ddf4d573fa005d7e4aa8865c","sha512":"626f9fa12a8ee8e9d38cd08bf79ac46370d0058f336549a08468031a4dbfa9954bdf38a1ad6aa5bf4647fb73f6fba453e1c71dc0e700c22c1cc1f6a41c476e69","ssdeep":"96:zPgGS3mx/1npLnnUFLDM9/f2eqSzcHK+OFI2nzTtsqV4co0dEyEm7tHxb:zPgGS3SNpbqDM9/uycXsfz5nOpHI7tHZ","tlshash":"9bb14e46a35e327bc1bb3515ec2f12c96a3d4a77f80a502b7d382dd41cd223a931ae74","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-04-03T16:55:19.716583Z","times_seen":100,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/plugins/convertkit/resources/backend/css/quicktags.css?ver=3.2.1","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/plugins/convertkit/resources/backend/css/quicktags.css?ver=3.2.1 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 19:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0738d-29d\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":669,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5ac76ff0435be87dbba399ce02f45de7","sha1":"f5d8bebd3d13acc2b9c7128ddf45bd9b31c835ad","sha256":"242aaa098db06ea744c3cbfb0b5966340fea81ba412b317ec4cfe4770a6612da","sha512":"4db17c70bd40d805f73ca70872f2081b35c15db0f0e600fe60d74263df956e266c3fab6e2535cd63dff6da5b1b3227bc006d86e177657fa43be3baa33569536d","ssdeep":"","tlshash":"3e01d4135af90f341f2fd94224ba2a7a4f1accc5758bde859c74154d81984d040cff2a","first_seen":"2026-02-21T23:37:42.623456Z","last_seen":"2026-04-03T16:55:19.718278Z","times_seen":68,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://spwidget-weinstein-counseling.clientsecure.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 116922\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-03T19:30:54.279442Z","times_seen":132596,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weinstein-counseling.clientsecure.me/widget-redirect?scopeId=177cf4f5-fd91-485c-99eb-d6217dd95d18\u0026scopeGlobal=true\u0026applicationId=7c72cb9f9a9b913654bb89d6c7b4e71a77911b30192051da35384b4d0c6d505b\u0026appearance=%7B%22fullScreen%22%3Atrue%7D","fqdn":"weinstein-counseling.clientsecure.me","domain":"clientsecure.me","tld":"me"},"ip":{"addr":"35.155.83.187","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.simplepractice.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2E:F5:AB:69:71:F9:8D:8F:07:42:21:4A:87:F8:CD:10:6D:81:A1","sha256":"0E:77:1E:D0:53:65:9D:8E:21:52:EE:85:B3:9B:B2:B0:21:01:D5:2F:CE:A3:4D:5F:10:C2:75:36:70:6B:76:37"}}},"request":{"raw":"GET /widget-redirect?scopeId=177cf4f5-fd91-485c-99eb-d6217dd95d18\u0026scopeGlobal=true\u0026applicationId=7c72cb9f9a9b913654bb89d6c7b4e71a77911b30192051da35384b4d0c6d505b\u0026appearance=%7B%22fullScreen%22%3Atrue%7D HTTP/1.1\r\nHost: weinstein-counseling.clientsecure.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 03 Apr 2026 16:54:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176\r\nstatus: 302 Found\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-permitted-cross-domain-policies: none\r\npragma: no-cache\r\nx-xss-protection: 0\r\nx-request-id: c7a9525f-94c1-4a57-8bef-89e383f168aa\r\nx-runtime: 0.010712\r\nx-frame-options: SAMEORIGIN\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: simplepractice-session=y5KJ01b4cWd1JBOpKjUhSlI0WylyqAhL4KCZMMxXQxbfBHU8%2BJfLKfhdTZqCg8EsA1utQwwNo7%2FhDAVuOHzXSFt1n7QIWnQRQEXm%2BhssIYS%2FAfSFPvekZWRpb4FfIwetX3lIjgWYHaZAYaKGo0TlVSn3UYqHHobpebg4KXmkHiaYpwPicY8AAX9WbLmENDyVOWD4mst28O49jDVVNIOjEsYy3emnsct80sSB5JE44sdmERqKvXp%2FBWb18YCVNQ%3D%3D--YRVT2gWrxu3khjNn--fmIYyDGh8JiqxzexziVPKQ%3D%3D; path=/; secure; httponly; samesite=lax\r\nx-powered-by: Phusion Passenger(R) Enterprise\r\nserver: nginx + Phusion Passenger(R)\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Phusion Passenger","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":32113,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1993,"timings":{"blocked":904,"dns":22,"connect":171,"send":0,"wait":184,"receive":0,"ssl":706},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html#__shared_params__[version]=v3\u0026__shared_params__[light_experiment_assignments]=%7B%22token%22%3A%22a1adba93-a5ca-429c-9c4f-5a6bdadb3f46%22%2C%22assignments%22%3A%7B%22link_ewcs_prewarm_experiment_v2%22%3A%22control%22%2C%22react_version_17_v2%22%3A%22control%22%7D%7D\u0026apiKey=pk_live_3xKrxPJwp8At8ICCilEP6VRa00uLunAwGN\u0026stripeJsId=a1adba93-a5ca-429c-9c4f-5a6bdadb3f46\u0026stripeObjId=sobj-1c3427ac-25c3-46bb-b33f-0b15ac084dea\u0026firstStripeInstanceCreatedLatency=623\u0026topOriginForCrossOriginFrame=https%3A%2F%2Fwww.weinsteincounseling.com\u0026controllerCount=1\u0026isCheckout=false\u0026stripeJsLoadTime=1775235274330\u0026manualBrowserDeprecationRollout=false\u0026mids[guid]=NA\u0026mids[muid]=NA\u0026mids[sid]=NA\u0026react_version_variant=control\u0026referrer=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026controllerId=__privateStripeController7591","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://spwidget-weinstein-counseling.clientsecure.me/widget/unavailable?appearance=%7B%22fullScreen%22%3Atrue%7D\u0026practiceId=662176","date":"2026-04-03T16:54:34.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/controller-with-preconnect-7366d87d8453f34970903940aa172b61.html HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spwidget-weinstein-counseling.clientsecure.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 418\r\nlast-modified: Fri, 03 Apr 2026 01:59:42 GMT\r\netag: \"7366d87d8453f34970903940aa172b61\"\r\ncontent-type: text/html; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:34 GMT\r\nvia: 1.1 varnish\r\nage: 53115\r\nx-request-id: 3ea796c4-3808-449d-8c3b-47dbe5ad98d3\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4217\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-security-policy: base-uri 'none'; connect-src 'self' https://api.stripe.com https://merchant-ui-api.stripe.com https://stripe.com/cookie-settings/enforcement-mode https://errors.stripe.com https://r.stripe.com https://ppm.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src 'self'; img-src 'self' https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk='; worker-src 'none'; report-uri https://q.stripe.com/csp-report\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":745,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (745), with no line terminators","md5":"7366d87d8453f34970903940aa172b61","sha1":"e095afc8d4a5101cf85648bd61a8a0ec45b96dde","sha256":"9c538d334339ad8195510eca7ffb5178cd734355ea7bacf594278a2a818cfb58","sha512":"548ac005598891d7df3767b88325c413cb9a1080df849a39066a7535138166ad2692e61deaa511af5c7a6706d9dd0bb841a919730a6305e8c82541b3ca84285a","ssdeep":"","tlshash":"7e01dcf3ae201428639017944861750c1d0b180aae90c0925de230fb51c0ff7982bfe6","first_seen":"2026-04-03T03:04:08.023263Z","last_seen":"2026-04-03T17:27:06.318959Z","times_seen":107,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/font-awesome.css?ver=4.4.0","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/font-awesome.css?ver=4.4.0 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-8926\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35110,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (357)","md5":"5ceb494e5e58d899541ce1e27bb5ea94","sha1":"c39756ca55807582fe1b114dbf0725686cfe690b","sha256":"3d0973a54d1f231e17e71a062371e50ffff320a49835df032230329473c31155","sha512":"2b576fbbb5ddaad8920ed194fb5545f22a2cbc27a3379de4d780478da8e08f052ccd637d91bb929eea6f16497e3e3af12ca60fb2200a09b196120dc824546fc1","ssdeep":"768:8MtE+A4CSIDqvnI+YTBrFPvVrJjPiRAii4:htE+A4GDUI+Y9rpVljPiI4","tlshash":"2af23fece5bf18804391e0d16386a270fb3dbb2d9d4a6d9cd2a2798cb1c1255d2c63dd","first_seen":"2023-05-09T14:37:13Z","last_seen":"2026-04-03T16:55:19.721503Z","times_seen":76,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:32.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 05:19:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693119cb-58ea\"\r\nexpires: Sat, 03 Apr 2027 16:54:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-03T19:30:38.829616Z","times_seen":130579,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/out-4.5.45.js","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"54.240.174.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.stripe.network/inner.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-04-03T16:54:35.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /out-4.5.45.js HTTP/1.1\r\nHost: m.stripe.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.stripe.network/inner.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 10 Sep 2025 21:05:01 GMT\r\nserver: Cloudfront\r\ncontent-encoding: gzip\r\ndate: Fri, 03 Apr 2026 16:52:30 GMT\r\ncache-control: max-age=300, public\r\netag: W/\"f4d61b273ea36d2e71ce1a601ab0caa2\"\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nage: 128\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 7UbVYPWWh_JtRkID4hjKLQuoqwPPG_i0gnYZBEEsOop8G7yWKiCE0g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":88737,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"f4d61b273ea36d2e71ce1a601ab0caa2","sha1":"832e652c884863f3a56a13a6a0a43fd56b5e2c85","sha256":"f2a8a36c74c59cfbe7a73d441cfd180ca6e6a9942a74ef9b240191d1c6056a59","sha512":"fe3c3e033551f745e0a8528d0afc239baf3b1045a0442aff9483a8b796ce332310de2230b6803483bd64d7cc6a0a3f420f12b95651822f7ef7687ff311845391","ssdeep":"1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqI47d+/:2sHx8vzWX8O1iSg1jboAmKum7Eq3p+/","tlshash":"608353c97aa6f45942f368ba802f610bf23f9d15044da041f6a1d8e17c791ed8273f6e","first_seen":"2025-09-10T21:19:46.014301Z","last_seen":"2026-04-03T19:32:49.548154Z","times_seen":56300,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.weinsteincounseling.com/wp-content/themes/Archive/css/superfish.css?ver=1.3.3","fqdn":"www.weinsteincounseling.com","domain":"weinsteincounseling.com","tld":"com"},"ip":{"addr":"34.174.147.138","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.weinsteincounseling.com/","date":"2026-04-03T16:54:31.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weinsteincounseling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:45:58 GMT","end":"Mon, 04 May 2026 10:45:57 GMT"},"fingerprint":{"sha1":"88:8A:3B:C4:0B:97:9A:5C:5A:B5:78:93:AA:B7:64:66:2A:4D:A1:CE","sha256":"6C:ED:96:45:16:AC:1B:7A:7C:56:96:E1:EA:68:A4:0B:61:25:82:53:BC:AB:4F:F3:55:1B:D9:E5:9A:E1:AB:4C"}}},"request":{"raw":"GET /wp-content/themes/Archive/css/superfish.css?ver=1.3.3 HTTP/1.1\r\nHost: www.weinsteincounseling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.weinsteincounseling.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 16:54:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Dec 2020 19:53:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fecdac6-30f\"\r\nexpires: Sat, 03 Apr 2027 16:54:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":783,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ceac76df3290582bb7b7590acf99246b","sha1":"5aa46e86f3927d8e8817e9e01a0d73e479d25b5c","sha256":"4e736585a931c6dc2b1ad6e2c46f41c0be57f54c2d0834f4efc67785e90f9259","sha512":"8fde6bb5156597c56ab5e1b319d19efa81d1c755d90f0a55de4c47a5f51c9bdad8e84437f8ef0c406c985f933910e0cb93afe150b8384eb789588cff34c6d0bc","ssdeep":"","tlshash":"5d01ce1d11c1260d138e947bd407307357da0228ddab4780b8cf6410a5d6ab411b81ce","first_seen":"2023-04-26T21:39:01Z","last_seen":"2026-04-03T16:55:19.728088Z","times_seen":31,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"www.weinsteincounseling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"151.101.0.176","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fspwidget-weinstein-counseling.clientsecure.me%2Fwidget%2Funavailable%3Fappearance%3D%257B%2522fullScreen%2522%253Atrue%257D%26practiceId%3D662176\u0026title=Weinstein%20Counseling%20%7C%20SimplePractice\u0026referrer=https%3A%2F%2Fwww.weinsteincounseling.com%2F\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-04-03T16:54:35.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:D8:C0:40:39:DB:E2:76:BD:5C:56:48:87:F7:C4:37:B1:D5:E9:37","sha256":"07:7A:0C:BB:89:15:7C:74:AB:8E:F1:CB:1F:97:9F:F8:56:5A:3D:EA:E3:CA:87:75:DB:C3:3F:01:71:53:42:9F"}}},"request":{"raw":"GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 315\r\nlast-modified: Fri, 11 Nov 2022 20:25:36 GMT\r\netag: \"d96c709017743c0759cf3853d1806ba5\"\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: Fastly\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 16:54:35 GMT\r\nvia: 1.1 varnish\r\nage: 2133448\r\nx-request-id: 4cfc642a-3cf4-40e9-9ef4-fabbd3469451\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 420767\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (526), with no line terminators","md5":"d96c709017743c0759cf3853d1806ba5","sha1":"72e21587610c49c8305a55e71f73fa88ed618205","sha256":"ba2338aa6670580269c762f51c4291daef913201aa8f4d4fd166c1a878262652","sha512":"974e260ed8bd1d99628fc3248f07179f6ea228e37a6b9d3ef906dba57571f2df54d73f93d1f3460902d28a90bd4793bca35477b2ef8fbf424b9112147f04bccf","ssdeep":"","tlshash":"13f0507a75620d7c819e844173df7b00767bd86944057e01865da8c4b760dcbe257bc9","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-04-03T19:32:49.514009Z","times_seen":78056,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}