{"report_id":"6cf40053-fdd4-47de-af9f-3a2f0ca02833","version":6,"status":"done","tags":[],"date":"2025-10-25T21:43:13Z","url":{"schema":"http","addr":"theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":0,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"title":"Page not found – The Closing Queen"},"submit":{"url":{"schema":"http","addr":"theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":0,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-29T21:43:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.theclosingqueen.com","ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-25T21:43:14.559801Z","last_seen":"2025-10-25T21:43:14.559801Z","alert_count":0,"request_count":14,"received_data":2141100,"sent_data":7711,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"widgetbe.com","ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-09-09","domain_rank":97246,"first_seen":"2020-03-20T11:55:23Z","last_seen":"2025-10-22T15:23:53.67391Z","alert_count":0,"request_count":10,"received_data":564764,"sent_data":4770,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}]},{"fqdn":"theclosingqueen.com","ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-25T21:43:14.558117Z","last_seen":"2025-10-25T21:43:14.558117Z","alert_count":0,"request_count":1,"received_data":80033,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"991c33c0f3b3a8475b0965431d71b84f","sha1":"ffac0bc623f0bf7a1f3833d0796f8f2fe0e6dc7e","sha256":"60106cafe6387aed0b50608d16b177e13e1afb39feb1cce293bc29d34f8a0f32","sha512":"a314e6be7fc2c1d8f0a4013fc68bc11ee3bff05f8cda06d39fdd8efe0df38bd409b6b2d39c02fb2adb0bab3eb299d83c8128097549116ed7d2535a90c90ab99b","ssdeep":"","tlshash":"f5e0689830d044b6357a24b9127b6f3eb0bf25bc98084c001e5bd608763ccd78c2c6dc","size":413,"data":"","first_seen":"2025-10-25T21:43:20.859391Z","last_seen":"2025-10-25T21:43:20.859391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-scripts/aa220b53f575573db0190b1440d19879.min.js?ver=3.11.10","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f145089d14fd3691ebd3861a3e777a68","sha1":"840b4f093779031a23ad6218a3c97de8f8f4b09f","sha256":"5725369c702a7e9d3992d31b4a030957b93a96dcc7ea25bd46d0cd012fd617f9","sha512":"d5a46731d3fc7b3037d0150548ccaab51014dffbbaa3e9f613c6d04b6cb5b68242acaa803284e31099ad1be38ddb774554c156b313cc6290622f1530f0dd9e9f","ssdeep":"6144:0Cq9UcmAP4nRQI/K8yTqyWk0EErxc2KWVE5x3Ck2yvP7GD7tveGsGEGEZYtO8HVu:tqeD1QIor0EycN/SwPlZGEZFGmFHDtZv","tlshash":"6ac44c89b24070b542f761aaa17f520572375a68b40a8168b07dc8fb2d7cd8d127bffd","size":590338,"data":"","first_seen":"2025-10-25T21:43:20.850479Z","last_seen":"2025-10-25T21:43:20.850479Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1754afb8a9f7ee81f751b2e107075785","sha1":"ae62359e3d300e02e5277cb5f5a9fa77c0523459","sha256":"5b659a423c09b5a828497b0b0a6a26da5ba814eaa471a737e27e21e5bfd2ef1b","sha512":"32edb7ba7678e5ba58fa96924f509b5dbfd5c88d6c44aed393e109111dad3046ecc0f6e02692c58ad4969e50213a0158cdbcabc43a7675c62e0c111f3031d730","ssdeep":"","tlshash":"5ae068e830e044b635bb10e9127bab3db0af26ec98084c005d9bd548763ccd78c2d6dc","size":413,"data":"","first_seen":"2025-10-25T21:43:20.86033Z","last_seen":"2025-10-25T21:43:20.86033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/agent","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d90cb0462b393bc39ff57a0cd3890671","sha1":"795466f2df31cbfd83d35eeb0cc6cce2da96abca","sha256":"486e20e257e5489757d50fd9233cdf7554b1dc619349544d90738162fbfda136","sha512":"c4e572f95c6ce5ae05e980351ff3d412d949d6f49df467a2deaff31dfa3929e9d1e9b2a4139a4f8581c0d80d7dcfdde93dcea621fec0dbd0beae878d9308c0e8","ssdeep":"1536:YYXGEqaSqusFBF63ZhE/9LiEqaD0BJozTyoW:IECjs03ZhETqmQ","tlshash":"a47381cdbac6f0a553a372b4802f510ba17b6a59b44e84d0d666d1d0bc7898f913bf3c","size":79458,"data":"","first_seen":"2023-04-07T01:29:46Z","last_seen":"2026-04-01T01:57:36.934582Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"cd3110190fd30fe20298b806baadd335","sha1":"eae4320662aa0f848483ba5ae2b9a863f2b6d3b6","sha256":"e8ce5b7d21da3e191d0cf38168d5c12cebe01fc285751a72962e5669faa1f40f","sha512":"a5bebb8d273bf44b0d7f7f95cf675c1de671b30e92f99c4ffff16a8fe2c2a01c0471c220c548f99b40dd5445bd8f8b69ea74ec81dfb6ef35a721bb9a61c3c6ec","ssdeep":"","tlshash":"c2b092a61aa540105e8a05aa80a1e52a7891609d982998068caadc1e3e60ef21c761a8","size":123,"data":"","first_seen":"2023-07-16T13:29:01Z","last_seen":"2026-04-04T10:56:42.356904Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a29eee38377876a5fef7fde6f714211","sha1":"66e5281767a5e019dac163696dfe7753bba4fa20","sha256":"319580ef5f2f38f9bce87b07075e029a56de1b38a312721ce079be855246570d","sha512":"e169601e77e3897349a4cadf1710511a2d7e78011de7492d59affabe1f76f5df2bfb94be58ad1ef4671447d08260006536a29eba33f9bc3cda97bf1e681c65f3","ssdeep":"","tlshash":"a2b0127d230461390e9b105d761140c03c603014b007fc43686ddcc7c420ca45502804","size":104,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-04-04T12:15:23.436972Z","times_seen":13483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6a94103c455260d260effefe81a41df","sha1":"62fd5e0120b821cea7421087b3e7a9a5c4aafb2b","sha256":"b332c0be5b99fdfb2db165759cc14117b69e1881b75a5f6db8c9e9255f9194d1","sha512":"7a0255c6588ca45dbb9d380a34c954d8f1be4fd433bd063fcc41cf3ca91ace90203064148aeb2129ae9b13689881894edb800bdb9c3889311a49ffd2cc1b72a3","ssdeep":"","tlshash":"043146148549363280ea27ca91edd199b7390cade749841460f9cd2d3f18d9526eaffc","size":1860,"data":"","first_seen":"2023-03-09T11:51:17Z","last_seen":"2026-04-04T08:14:55.181833Z","times_seen":3416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/agent","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d90cb0462b393bc39ff57a0cd3890671","sha1":"795466f2df31cbfd83d35eeb0cc6cce2da96abca","sha256":"486e20e257e5489757d50fd9233cdf7554b1dc619349544d90738162fbfda136","sha512":"c4e572f95c6ce5ae05e980351ff3d412d949d6f49df467a2deaff31dfa3929e9d1e9b2a4139a4f8581c0d80d7dcfdde93dcea621fec0dbd0beae878d9308c0e8","ssdeep":"1536:YYXGEqaSqusFBF63ZhE/9LiEqaD0BJozTyoW:IECjs03ZhETqmQ","tlshash":"a47381cdbac6f0a553a372b4802f510ba17b6a59b44e84d0d666d1d0bc7898f913bf3c","size":79458,"data":"","first_seen":"2023-04-07T01:29:46Z","last_seen":"2026-04-01T01:57:36.934582Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"cd3110190fd30fe20298b806baadd335","sha1":"eae4320662aa0f848483ba5ae2b9a863f2b6d3b6","sha256":"e8ce5b7d21da3e191d0cf38168d5c12cebe01fc285751a72962e5669faa1f40f","sha512":"a5bebb8d273bf44b0d7f7f95cf675c1de671b30e92f99c4ffff16a8fe2c2a01c0471c220c548f99b40dd5445bd8f8b69ea74ec81dfb6ef35a721bb9a61c3c6ec","ssdeep":"","tlshash":"c2b092a61aa540105e8a05aa80a1e52a7891609d982998068caadc1e3e60ef21c761a8","size":123,"data":"","first_seen":"2023-07-16T13:29:01Z","last_seen":"2026-04-04T10:56:42.356904Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/widget","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f7731c9f33fefbc26a530ded8ae966a","sha1":"38b1a41967ab17e5f21741b89c75010aca3f9e22","sha256":"27f1c653fa57efb0f78386773681eae6bc3fedc7daadc1f0d52ba00af9c67705","sha512":"3292235e668af86e58e4e933d17186f8e485f32abac38c59a74105243ccf5e01090080c34ca1264f0a0bff2ce6dd31d56b9dde2fa82a3b192f4a08b95e57fa6d","ssdeep":"1536:8UTK+OdFmWzK16BLxs4zwWNkCgHZ+MfUMhQd+kMkSAD9+hRIhkxkvf/OkT0xgDFz:k+6FaPQd+kMkSAD9/kxkp0x8uOHNz","tlshash":"c304d689fe91b06153e3b5b841af460ee33aae19a49980e4f760d5d1ecf844d412bf3d","size":177509,"data":"","first_seen":"2023-09-21T22:20:17Z","last_seen":"2026-04-01T01:57:36.97196Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/widget","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f7731c9f33fefbc26a530ded8ae966a","sha1":"38b1a41967ab17e5f21741b89c75010aca3f9e22","sha256":"27f1c653fa57efb0f78386773681eae6bc3fedc7daadc1f0d52ba00af9c67705","sha512":"3292235e668af86e58e4e933d17186f8e485f32abac38c59a74105243ccf5e01090080c34ca1264f0a0bff2ce6dd31d56b9dde2fa82a3b192f4a08b95e57fa6d","ssdeep":"1536:8UTK+OdFmWzK16BLxs4zwWNkCgHZ+MfUMhQd+kMkSAD9+hRIhkxkvf/OkT0xgDFz:k+6FaPQd+kMkSAD9/kxkp0x8uOHNz","tlshash":"c304d689fe91b06153e3b5b841af460ee33aae19a49980e4f760d5d1ecf844d412bf3d","size":177509,"data":"","first_seen":"2023-09-21T22:20:17Z","last_seen":"2026-04-01T01:57:36.97196Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc2dd2aa3ecaefb3813370245a46c5b0","sha1":"8a325ed1c5bc9e492928e25bdac8c9944e783d4e","sha256":"448790d8392dd1cd4f69421e852a1ed764de7c7b9be8c67b348d6f92125e0d93","sha512":"806d8c300d93dded478af6a99b240d3c3347fe13a8c420c459dcfc89c1a86881658f5bb8e34e1fb159123585cb7d51eeab1df38eb97ed5ca6037d2e46712f2b9","ssdeep":"","tlshash":"94e0269d9f0c255bf13170a0543b9b9f317f127cba80af7e3fa6b1006dc42199991600","size":351,"data":"","first_seen":"2025-10-25T21:43:20.862746Z","last_seen":"2025-10-25T21:43:20.862746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"e769dd357b72f55125e98cbdde415ebf","sha1":"7c13c02b8de3e741cbb764523bad7ec03ea8e4ef","sha256":"8cf506b3455fe2c1648946feabcef6614cd0b9e0eadbe9e4dbd6ee2aac28b894","sha512":"6bd50307b203f2d912210bbd56e299ee77d77bb439ed356e79cd958a68fe49346fd83a42a3320d6e52fd303bbce30351761db907aad5ec9706710442e968655c","ssdeep":"","tlshash":"0dc02b720bd540001d4a035a4060f52a3850304e841488018cbdcc0e3d30df31c360a8","size":139,"data":"","first_seen":"2023-03-08T13:10:55Z","last_seen":"2026-04-04T10:56:42.383151Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T21:42:51.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/ HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 25 Oct 2025 21:42:52 GMT\r\nServer: Apache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nLink: \u003chttps://www.theclosingqueen.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":79569,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17062), with CRLF, LF line terminators","md5":"f1935224451d87e7881217188ba30a97","sha1":"730430d62f00c01d57c66df2096dc47f0bee9bc5","sha256":"282bd33922ab648e4dea10c8c68a744b113de1974cf8f91cf4e54d915ed3e8cf","sha512":"8c56c47f8d2fd8f7f960c6d4a4b645f6b643a5585acb6d0475c75f5454c73b7a7ab5558956e5a977a528aa65e2234a5f48dfa1b05c9ec3f7236ffed55471aca0","ssdeep":"768:rPLuMRot58zi85Oceeg8C8CKtf8d8vO8jF8qwqt/8q8CZ8h99tbn88y8xP8ptkvs:rPL57edxbuJesJelJexkZDI","tlshash":"22738462f8400037a3631f9dd149ae2cf177d680fa8b5ba47598f2db75c6e9ed690308","first_seen":"2025-10-25T21:43:20.842658Z","last_seen":"2025-10-25T21:43:20.842658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3953,"timings":{"blocked":388,"dns":140,"connect":119,"send":0,"wait":2173,"receive":1005,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/agent","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /agent HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Sat, 25 Oct 2025 21:43:02 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nexpires: Sun, 25 Oct 2026 21:43:02 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private, max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UC1ZDKgG8ysff8N08L-NufhXzcfM_SaJM7g6NIqz5hsStDcuUpIuxQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":79458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48709), with NEL line terminators","md5":"d90cb0462b393bc39ff57a0cd3890671","sha1":"795466f2df31cbfd83d35eeb0cc6cce2da96abca","sha256":"486e20e257e5489757d50fd9233cdf7554b1dc619349544d90738162fbfda136","sha512":"c4e572f95c6ce5ae05e980351ff3d412d949d6f49df467a2deaff31dfa3929e9d1e9b2a4139a4f8581c0d80d7dcfdde93dcea621fec0dbd0beae878d9308c0e8","ssdeep":"1536:YYXGEqaSqusFBF63ZhE/9LiEqaD0BJozTyoW:IECjs03ZhETqmQ","tlshash":"a47381cdbac6f0a553a372b4802f510ba17b6a59b44e84d0d666d1d0bc7898f913bf3c","first_seen":"2023-04-07T01:29:46Z","last_seen":"2026-04-01T01:57:36.934582Z","times_seen":488,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":164,"dns":33,"connect":1,"send":0,"wait":311,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-icons/Marketing-Bold-v1.5/fonts/Marketing-Bold.ttf?x1m7hf","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/fusion-icons/Marketing-Bold-v1.5/fonts/Marketing-Bold.ttf?x1m7hf HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 Aug 2024 21:35:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4428\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4428,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, Marketing-Bold","md5":"b23992c6e97b7a1fd85a61ddd40722ce","sha1":"616a6a7d393cd9300a490922025484a3c81e30de","sha256":"f6d39ef0d4574800ab794cde7be4288232e1a4ca2a45a5c3bb4c0afae56ebf81","sha512":"574fdd06c43a41156a6713533374902030f312651c1e231985a0ad207ed5fa06d64798e12a4b919a152b60a704885162ff9eb24724f5006a06949b89262be94d","ssdeep":"96:zsRlmnefT+qc6uYdw3tBEnHF43etuVKHVvHqeoBI2K38f4DG:YRl5Tc6uYdwdiGIuIHVvKer8wK","tlshash":"c691b613938bca9de522437dac7513e00bb4a968d26fab4eaa8080459d663d94df034e","first_seen":"2023-04-10T16:30:18Z","last_seen":"2026-04-04T09:57:59.273727Z","times_seen":208,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":259,"dns":2,"connect":122,"send":0,"wait":140,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/config","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"POST /config HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 94\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:02 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-id: EF0JlWhoYtK4x8WCqTbfjqsw-ZAweeNE3bqYw8brt1PLMfqNWBPRMg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87f94a2f9761b3513b0de2e5dd0ccc15","sha1":"53eaedc6f876dec1845dd89462d48005c2cba11e","sha256":"704241b3575550c99043736e1d4dcc3bb05283a4f72f15687b70042140887424","sha512":"582a0c474eb0b8f47c5f65d814fcfa7ae038da76156223f75f60204f5649273bbf97c78cb9397d2e99dfa4e15508fc119adc6ee38516d4ee6fb07f21f991fcc7","ssdeep":"","tlshash":"c2d0a73d4b205a2ad65042306105de078d3e2a7bd84e7e1dbdccafc1577e99252d152f","first_seen":"2025-10-25T21:43:20.845693Z","last_seen":"2025-10-25T21:43:20.845693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/widget","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /widget HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:03 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nexpires: Sun, 25 Oct 2026 21:43:03 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private, max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-id: Y0jHYrvFKuBHEKeDOUTqFUIxk8gZvPT2aDffzz_hZtdAlRbeNqNFow==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":177509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36259)","md5":"5f7731c9f33fefbc26a530ded8ae966a","sha1":"38b1a41967ab17e5f21741b89c75010aca3f9e22","sha256":"27f1c653fa57efb0f78386773681eae6bc3fedc7daadc1f0d52ba00af9c67705","sha512":"3292235e668af86e58e4e933d17186f8e485f32abac38c59a74105243ccf5e01090080c34ca1264f0a0bff2ce6dd31d56b9dde2fa82a3b192f4a08b95e57fa6d","ssdeep":"1536:8UTK+OdFmWzK16BLxs4zwWNkCgHZ+MfUMhQd+kMkSAD9+hRIhkxkvf/OkT0xgDFz:k+6FaPQd+kMkSAD9/kxkp0x8uOHNz","tlshash":"c304d689fe91b06153e3b5b841af460ee33aae19a49980e4f760d5d1ecf844d412bf3d","first_seen":"2023-09-21T22:20:17Z","last_seen":"2026-04-01T01:57:36.97196Z","times_seen":486,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/pages","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"POST /pages HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 305\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:03 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gX-nDIQU7nGBUInTeRxqeRTMb64S6zS9UDWXr-6BzVAGyjBYTwaaHA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/fonts/proximanova-regular-webfont.woff2","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /fonts/proximanova-regular-webfont.woff2 HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 21700\r\nage: 6279064\r\ndate: Thu, 14 Aug 2025 05:31:59 GMT\r\nexpires: Fri, 14 Aug 2026 05:31:59 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 07 Aug 2025 00:32:08 GMT\r\netag: \"54c4-63bbb96631072\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: tz9aNwiO5hDlrK3j2V1A0Nyb9ge_hSF_3QVcP281YJDLVmap0dfOnQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":21700,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21700, version 3.1114","md5":"88af5b7486b8cc0c3a2bac6f96c1ad75","sha1":"e931dcf9feaa8f1fdc6951065bdbf27657c1a87f","sha256":"b8b76f4f8d7be014961358274f5002a23afa8a794499a5f0346745a7a3ff0795","sha512":"0b5a088455cb24c009545feadb48c1b4bd354dd2fe2129cc9dc41ec92dd3a0c8c1e5873a76359ef25b12934dbad8978d402f05595c5599fe7fc61e0ff72cb2f0","ssdeep":"384:WK2Eweq5KphKCl/HFKnjzknaICZqxLp5jGTnKbzs7UHvHUSOdMn8q:nSejplHFKn+CZqx6eb47ASMn8q","tlshash":"65a2d1850adff047f930de12c3cefc0852995599d763d6b117626ed421d6c08d77894b","first_seen":"2023-04-11T21:26:26Z","last_seen":"2026-04-04T10:56:42.219221Z","times_seen":503,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/fonts/proximanova-regular-webfont.woff2","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /fonts/proximanova-regular-webfont.woff2 HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 21700\r\nage: 6279064\r\ndate: Thu, 14 Aug 2025 05:31:59 GMT\r\nexpires: Fri, 14 Aug 2026 05:31:59 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 07 Aug 2025 00:32:08 GMT\r\netag: \"54c4-63bbb96631072\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: jTK3myB54F5q9zireDOlQ2SAiALQ3nrDQk2BTfaeO650eErM2MbCHQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21700,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21700, version 3.1114","md5":"88af5b7486b8cc0c3a2bac6f96c1ad75","sha1":"e931dcf9feaa8f1fdc6951065bdbf27657c1a87f","sha256":"b8b76f4f8d7be014961358274f5002a23afa8a794499a5f0346745a7a3ff0795","sha512":"0b5a088455cb24c009545feadb48c1b4bd354dd2fe2129cc9dc41ec92dd3a0c8c1e5873a76359ef25b12934dbad8978d402f05595c5599fe7fc61e0ff72cb2f0","ssdeep":"384:WK2Eweq5KphKCl/HFKnjzknaICZqxLp5jGTnKbzs7UHvHUSOdMn8q:nSejplHFKn+CZqx6eb47ASMn8q","tlshash":"65a2d1850adff047f930de12c3cefc0852995599d763d6b117626ed421d6c08d77894b","first_seen":"2023-04-11T21:26:26Z","last_seen":"2026-04-04T10:56:42.219221Z","times_seen":503,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T21:42:54.669Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/ HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 25 Oct 2025 21:42:54 GMT\r\nServer: Apache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nLink: \u003chttps://www.theclosingqueen.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":79559,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17065), with CRLF, LF line terminators","md5":"c629b17baf958e4d84b21a1859a7425b","sha1":"f2a1199276be3a27f1527de083dd1d27f433f7fd","sha256":"c372e645e33fb261851310cdc0afa00fdde10193e41f3734cf0693f4664e0897","sha512":"af80bc15be8418d93979559c5f2c257c99b71d42ce6c90eb992d860ab3938b94fadfddf4dd1cec10749cb4c834e414ca7d4b3e2f1b0ed9be9a3b8df4f7291387","ssdeep":"768:ruLuMRot58zi85Oceeg8C8CKtf8d8vO8jF8qwqt/8q8CZ8h99tbn88y8xP8ptkvh:ruL57edxbdJesJelJexk4sI","tlshash":"9a739462f8400037a3631f9dd149ae2cf177d680fa8b5ba47598f2db75c6e9ed690308","first_seen":"2025-10-25T21:43:20.848705Z","last_seen":"2025-10-25T21:43:20.848705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6690,"timings":{"blocked":118,"dns":0,"connect":121,"send":0,"wait":5927,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:01.225Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:01 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 29 Aug 2023 02:44:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 87553\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":119,"dns":1,"connect":118,"send":0,"wait":185,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-scripts/aa220b53f575573db0190b1440d19879.min.js?ver=3.11.10","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:01.227Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/fusion-scripts/aa220b53f575573db0190b1440d19879.min.js?ver=3.11.10 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:01 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 May 2025 07:56:46 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 590338\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":590338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34773)","md5":"f145089d14fd3691ebd3861a3e777a68","sha1":"840b4f093779031a23ad6218a3c97de8f8f4b09f","sha256":"5725369c702a7e9d3992d31b4a030957b93a96dcc7ea25bd46d0cd012fd617f9","sha512":"d5a46731d3fc7b3037d0150548ccaab51014dffbbaa3e9f613c6d04b6cb5b68242acaa803284e31099ad1be38ddb774554c156b313cc6290622f1530f0dd9e9f","ssdeep":"6144:0Cq9UcmAP4nRQI/K8yTqyWk0EErxc2KWVE5x3Ck2yvP7GD7tveGsGEGEZYtO8HVu:tqeD1QIor0EycN/SwPlZGEZFGmFHDtZv","tlshash":"6ac44c89b24070b542f761aaa17f520572375a68b40a8168b07dc8fb2d7cd8d127bffd","first_seen":"2025-10-25T21:43:20.850479Z","last_seen":"2025-10-25T21:43:20.850479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":117,"dns":1,"connect":120,"send":0,"wait":144,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.086Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/wp-content/uploads/fusion-styles/3b085f9cc8af6a21fd83a88bb34dc022.min.css?ver=3.11.10\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 04 Sep 2024 09:01:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 78212\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78212, version 331.-31261","md5":"8c4f474a3aaa695346196b1f33fab616","sha1":"abc1ae262d760e104a5a5cb68614ac119fd0db18","sha256":"ef2369c82b6ec19bcf4fe76799d94edc43604e164c0f73978059536159845441","sha512":"8cebde83c69bf5cc28f64263efce6ac0179eb74e716461a2bd9f8a1aa24e9a1ec971f7d5487e9d4adcc4a970f241ca3d5f356a19abd57dda8dbcb5f1eb64ab09","ssdeep":"1536:MGgygaAeCFuk9I0yvQkAcaCfK+DBfT5UftBd5OCNY21r/CrDhy4DDh+xu:XglnpFz9KQkAhCfBxT5Uf7d59xiDEs","tlshash":"277312b4fa369bcfa19c7cd0418ff22bde4078296b9f550111cdfd606a12a747369d18","first_seen":"2023-04-06T21:42:42Z","last_seen":"2026-04-04T12:37:47.17119Z","times_seen":11267,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-icons/Marketing-Bold-v1.5/fonts/Marketing-Bold.woff?x1m7hf","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/fusion-icons/Marketing-Bold-v1.5/fonts/Marketing-Bold.woff?x1m7hf HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 Aug 2024 21:35:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4504\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4504,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 4504, version 1.0","md5":"7eb516f1c727de966d36e3a4f952b135","sha1":"8207b66ad61891ab35f8dc3112bc78bfd6d8f949","sha256":"f3f775452a3e26fbdcff1863d23993c8a2cb07162e6bab1b5c03690904ff3fe2","sha512":"58a3b961b4058f737affb10ae900fd4352da3dc8c3c71289413c0ce370f560676d822dddb846623d267ee167a53a7cdef938ded975a3bab8d123a4121e1a335c","ssdeep":"96:T4Q0lmnefT+qc6uYdw3tBEnHF43etuVKHVvHqeoBI2K38f4DG:8Q0l5Tc6uYdwdiGIuIHVvKer8wK","tlshash":"7591b517938bcadde522437dec7513e00bb4a9a8d26fab49aa8080459d563d849f438e","first_seen":"2025-10-25T21:43:20.85205Z","last_seen":"2025-10-25T21:43:20.85205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/config","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"POST /config HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 94\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:02 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-id: yIlCgfTfBjNaJ4IDaJ0g86K1NgwGgEPCDS4rQmwDsEhv1B8owAetcg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":239,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62ad9487b0c442ee32eb5abc68b18630","sha1":"e329082e0beae7f37d983aed3538d26dbe75fdb3","sha256":"3d2ef5338e258e6ec05bf9ef26a053a45f8e11fa87a009518b172e5faa2b28f6","sha512":"4c037c7756336533755a58c1a314787bf4b6543419add501471ade72102f0c743056e4a45d99888e98a723172c381424742afcb7ff9a4e2e10947497feb6c521","ssdeep":"","tlshash":"7fd0972e09200820c62082352021ef1a8c7e163bc8886e0c2e8c5ac103724ca82c102b","first_seen":"2025-10-25T21:43:20.85306Z","last_seen":"2025-10-25T21:43:20.85306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","fqdn":"theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T21:42:49.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/ HTTP/1.1\r\nHost: theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 25 Oct 2025 21:42:50 GMT\r\nServer: Apache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nX-Redirect-By: WordPress\r\nLocation: https://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79569,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":2466,"timings":{"blocked":393,"dns":135,"connect":125,"send":0,"wait":1664,"receive":16,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/2024/08/White-background-1-400x200.png","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:00.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/White-background-1-400x200.png HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:01 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 16 Aug 2024 14:17:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 17180\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 200, 8-bit/color RGBA, non-interlaced","md5":"ea842be73026025f26a2c7b7aa6d6d16","sha1":"87f5f7bad98148b0248345b9474bb3ec07afffeb","sha256":"13f43ff952c70d09a88f8bf3a4a40f67e3376a935b0479fbbaaceeb80fe28212","sha512":"5eed6d3cf1ced3d89fac0d407b53f43a4103865f6b61c0ee4dc782fd70feed404fa3977adc1e8f3477c417b01c6a1d37f990662246a6ad7a9403a5d0bc3d9128","ssdeep":"384:psnKi8a+P0nRZXkA0FuZkl6qQbb/B7fhi9:psHY0vXkppl6zVfm","tlshash":"e272bff4e9b1c726dfbb1a3a86044ea38423878198d05e47f9f4d11e276bc909aa4691","first_seen":"2025-10-25T21:43:20.85417Z","last_seen":"2025-10-25T21:43:20.85417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2286,"timings":{"blocked":969,"dns":1,"connect":117,"send":0,"wait":217,"receive":129,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/agent","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /agent HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Sat, 25 Oct 2025 21:43:02 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nexpires: Sun, 25 Oct 2026 21:43:02 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private, max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Zt9SIluJwJ0JqyYtQmW_dZT_soVIlGs0ILpi64MfKqVo60NjniyYWg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48709), with NEL line terminators","md5":"d90cb0462b393bc39ff57a0cd3890671","sha1":"795466f2df31cbfd83d35eeb0cc6cce2da96abca","sha256":"486e20e257e5489757d50fd9233cdf7554b1dc619349544d90738162fbfda136","sha512":"c4e572f95c6ce5ae05e980351ff3d412d949d6f49df467a2deaff31dfa3929e9d1e9b2a4139a4f8581c0d80d7dcfdde93dcea621fec0dbd0beae878d9308c0e8","ssdeep":"1536:YYXGEqaSqusFBF63ZhE/9LiEqaD0BJozTyoW:IECjs03ZhETqmQ","tlshash":"a47381cdbac6f0a553a372b4802f510ba17b6a59b44e84d0d666d1d0bc7898f913bf3c","first_seen":"2023-04-07T01:29:46Z","last_seen":"2026-04-01T01:57:36.934582Z","times_seen":488,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":114,"dns":37,"connect":1,"send":0,"wait":419,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-gfonts/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/fusion-gfonts/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 May 2025 02:47:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36848\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7947,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36848, version 1.0","md5":"2af6ae8f8ab89d9d4b18984e451915db","sha1":"a45395e2da5c801059b03df9fa5748bc5a03680f","sha256":"4f6f1eb086f06f5d35b25f2195cfddb4a6810348774fb36b7e4b068a8f3bbeed","sha512":"b44acca88915e39801df7d3ecc4f37552d0c0a7168537e2b75256fd0a9b74def0f6992fb9dd45e55baffad162fe8dcaec830b2b524dd4ee72fc0d540322d20dc","ssdeep":"192:B+wyKgPN9zkhfUcY4G9aNeccBQooYmo8R:BLy76hfUcYHMNeZm7","tlshash":"6ff1aeb0b92799b0e55fb5f14076decf916bfc66205f5a92b044a022820fa832f51be1","first_seen":"2025-10-25T21:43:20.85539Z","last_seen":"2026-03-25T21:55:07.343393Z","times_seen":3,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":249,"dns":0,"connect":119,"send":0,"wait":135,"receive":2,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.082Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/wp-content/uploads/fusion-styles/3b085f9cc8af6a21fd83a88bb34dc022.min.css?ver=3.11.10\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 04 Sep 2024 09:01:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 20884\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20884,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20884, version 1.0","md5":"5821df88dcca2bf1e15ca638dc910050","sha1":"c244e12cabe2a72f1d20f340d3da6ab4f1374c2d","sha256":"fb47dc68f6a457c14c33d2ed6eb1e8a635d007f8868ed7e90e39a6feae9141a6","sha512":"08581751c385e39199c5a6edee5d8c8626a1397293936944a412962d1e3466a21ac7e5eb69bc9fc9954b3197e1432bd40bf079f7124303ba4a86fdb81c5ceb89","ssdeep":"384:60qpnsGsl9+DfCEH+eleJxnZnDwuJSnaLcIzGbu2I5fncEFUT/05:/qBsGsX+LF+elmVZDwuJdcxbu1qg5","tlshash":"7e923917cfe6cf4fe816a3788d5263220efad511933ae3e275869d4894195f04c2cf9a","first_seen":"2023-11-14T06:30:36Z","last_seen":"2026-04-04T12:11:13.931612Z","times_seen":2678,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-gfonts/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/fusion-gfonts/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 May 2025 02:47:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36848\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7947,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36848, version 1.0","md5":"2af6ae8f8ab89d9d4b18984e451915db","sha1":"a45395e2da5c801059b03df9fa5748bc5a03680f","sha256":"4f6f1eb086f06f5d35b25f2195cfddb4a6810348774fb36b7e4b068a8f3bbeed","sha512":"b44acca88915e39801df7d3ecc4f37552d0c0a7168537e2b75256fd0a9b74def0f6992fb9dd45e55baffad162fe8dcaec830b2b524dd4ee72fc0d540322d20dc","ssdeep":"192:B+wyKgPN9zkhfUcY4G9aNeccBQooYmo8R:BLy76hfUcYHMNeZm7","tlshash":"6ff1aeb0b92799b0e55fb5f14076decf916bfc66205f5a92b044a022820fa832f51be1","first_seen":"2025-10-25T21:43:20.85539Z","last_seen":"2026-03-25T21:55:07.343393Z","times_seen":3,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":268,"dns":4,"connect":133,"send":0,"wait":128,"receive":97,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/widget","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"GET /widget HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:02 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nexpires: Sun, 25 Oct 2026 21:43:02 GMT\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private, max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-id: w0AYq7l1NdilpwlV2et_hEge5LbWX0A-PUBORm_C8_nmggBg1_pYFw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":177509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36259)","md5":"5f7731c9f33fefbc26a530ded8ae966a","sha1":"38b1a41967ab17e5f21741b89c75010aca3f9e22","sha256":"27f1c653fa57efb0f78386773681eae6bc3fedc7daadc1f0d52ba00af9c67705","sha512":"3292235e668af86e58e4e933d17186f8e485f32abac38c59a74105243ccf5e01090080c34ca1264f0a0bff2ce6dd31d56b9dde2fa82a3b192f4a08b95e57fa6d","ssdeep":"1536:8UTK+OdFmWzK16BLxs4zwWNkCgHZ+MfUMhQd+kMkSAD9+hRIhkxkvf/OkT0xgDFz:k+6FaPQd+kMkSAD9/kxkp0x8uOHNz","tlshash":"c304d689fe91b06153e3b5b841af460ee33aae19a49980e4f760d5d1ecf844d412bf3d","first_seen":"2023-09-21T22:20:17Z","last_seen":"2026-04-01T01:57:36.97196Z","times_seen":486,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/uploads/2020/08/mc-favicon.png","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.107Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2020/08/mc-favicon.png HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/\r\nCookie: WidgetTrackerCookie=c32f942f-6653-4ec9-af18-19d174361312; WidgetTrackerDomainCheckCookie=WidgetTrackerDomainCheckCookie\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 25 Oct 2025 21:43:03 GMT\r\nServer: Apache\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nLink: \u003chttps://www.theclosingqueen.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":79569,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17065), with CRLF, LF line terminators","md5":"14730ba92ecad57ebf4cb8b9dc4a78d3","sha1":"1bcc0ab0f4aefcece89a39577e42be9f23d00c03","sha256":"36209e32c62faaf37ac67915540605d9d0a94718841ea58770afe51b50209198","sha512":"63c945ecc4f90c4d2a1ca0963a62e3a4d0a9d39bae271fbd76ef3eee56d6b2d2dd9abd767187cf2c1b8ff6f547bdfbb7d10cacb975f0193e701e795339d47362","ssdeep":"768:ruLuMRot58zi85Oceeg8C8CKtf8d8vO8jF8qwqt/8q8CZ8h99tbn88y8xP8ptkvs:ruL57edxbyJesJelJexk4sI","tlshash":"51739462f8400037a3631f9dd149ae2cf177d680fa8b5ba47598f2db75c6e9ed690308","first_seen":"2025-10-25T21:43:20.856771Z","last_seen":"2025-10-25T21:43:20.856771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2347,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.theclosingqueen.com/wp-content/uploads/fusion-styles/3b085f9cc8af6a21fd83a88bb34dc022.min.css?ver=3.11.10","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":80,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:00.855Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/fusion-styles/3b085f9cc8af6a21fd83a88bb34dc022.min.css?ver=3.11.10 HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:01 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 May 2025 02:49:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1042744\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1042744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49818)","md5":"3b085f9cc8af6a21fd83a88bb34dc022","sha1":"6e79079cb4275de359478a9c3dc031d043d7b9b2","sha256":"744b68ec5581f42f41cdca70813e0ae64ded1aef1e1f14372b0858791644da7b","sha512":"e28e7db3ab81590d8792eb86f6e1a61077c303ac1f1819198dc6228ef2f9ef0c62213b013f6a9fdda61806ff5fb6963f01e2df159bee9d99f640b7c91e95f286","ssdeep":"6144:14JnJduxPx0IFTBoa3Xj3kp5HZ883ZRilEP+oHf8Sudms0X3Ekln85RL9Asns/4d:m3doOIFTC7HrilEP+peTCYtotsbROeS","tlshash":"cf25d8e1d41410e87363c32dd788b66c513baf90f6424fe9f48de48a46c6be9da913d8","first_seen":"2025-10-25T21:43:20.857642Z","last_seen":"2025-10-25T21:43:20.857642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":123,"dns":1,"connect":122,"send":0,"wait":172,"receive":743,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.theclosingqueen.com/wp-content/uploads/2020/07/equip-leaders-from-strategy.png","fqdn":"www.theclosingqueen.com","domain":"theclosingqueen.com","tld":"com"},"ip":{"addr":"66.115.166.241","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:02.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.theclosingqueen.com.aarcprogram.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:16:46 GMT","end":"Mon, 01 Dec 2025 06:16:45 GMT"},"fingerprint":{"sha1":"2B:32:3E:74:9A:C6:0C:4A:41:2A:21:4A:93:3C:90:1D:6C:5A:DA:1A","sha256":"75:57:38:8F:36:DB:F6:84:8F:77:9A:67:11:E4:42:13:1C:45:AC:C7:79:4E:10:04:00:ED:BD:AF:4D:EB:6C:8D"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/equip-leaders-from-strategy.png HTTP/1.1\r\nHost: www.theclosingqueen.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nCookie: WidgetTrackerDomainCheckCookie=WidgetTrackerDomainCheckCookie; WidgetTrackerCookie=fda01e1d-b986-48e3-bb9d-b1c8aa0a47c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 25 Oct 2025 21:43:02 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 Aug 2024 21:34:45 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36786\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1081 x 1009, 8-bit colormap, non-interlaced","md5":"811f26d7afa4874094d2f5c7ce32f111","sha1":"63a561965f0a59b65e12db52b66153b7fc4eaa85","sha256":"40ca7fa79bc65611da34731b3e5746640f32ded81da664acca4c561fbb4ec079","sha512":"ee39a683616fd6b43e6050526ecdfab36e65c79f7ae6b5fb21acbf59777be39dcc6d6ad80f35a20a8a0101ea47c79039b1a8f0e6f019d0db4a40e6efafafef1b","ssdeep":"768:o1/nD0YgoIrN5vr1V8W4sgXxIA5xJJT6OymbvJd05MvYn:o1/ngYK91iPxIAJ0Oymbvv05wy","tlshash":"b3f2f14af9d06b37a5507c325a60183c4fb86b403aa28dcdb37e6d45e51c2d73ea4f4a","first_seen":"2025-06-24T05:22:38.166793Z","last_seen":"2025-10-25T21:43:20.858438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgetbe.com/pages","fqdn":"widgetbe.com","domain":"widgetbe.com","tld":"com"},"ip":{"addr":"54.240.174.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.theclosingqueen.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10131303\u0026pdata=http:/","date":"2025-10-25T21:43:03.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgetbe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 07 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:42:A1:AB:1C:ED:36:75:D9:5C:72:7D:E3:D3:B1:54:25:78:0F:CD","sha256":"4F:6F:40:10:3E:DF:1A:64:AC:F4:41:CF:92:C4:CC:36:88:CC:BB:4B:A7:4D:86:A5:F4:1A:D4:EC:6E:3A:DA:64"}}},"request":{"raw":"POST /pages HTTP/1.1\r\nHost: widgetbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 305\r\nOrigin: http://www.theclosingqueen.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.theclosingqueen.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 25 Oct 2025 21:43:03 GMT\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\nserver: Apache/2.4.62 () OpenSSL/1.0.2k-fips PHP/8.1.33\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: MmjymagS8Wt1i2JYWybzC7Pjqhmt6qb0_S9jXR418-pZ5Ez_SphrUQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}