WEBSITE ANALYSIS REPORT

http://engage.freshmarketadvantage.com/aff_c?offer_id=506&aff_id=9&aff_sub=A1G1&aff_sub2=alexis@slurpmail.net&aff_sub3=&aff_sub4=crispymoment&aff_sub5=vaccomarine.com&resid=&email=alexis@vaccomarine.com

06 Jul 2026 · 02:27:17.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:26:50.394 GET No response document 0 B 0 ms —

02:26:53.049 GET 302 document 0 B 147 ms —

02:26:53.210 GET 302 document 0 B 222 ms —

02:26:53.438 GET 200 document 50.9 KB 640 ms 1 alerts

02:26:54.334 GET 200 stylesheet 154.9 KB 254 ms 1 alerts

02:26:54.336 GET 200 stylesheet 227.0 KB 627 ms 1 alerts

02:26:54.338 GET 200 script 53.2 KB 502 ms 1 alerts

02:26:54.340 GET 200 script 925.7 KB 894 ms 1 alerts

02:26:54.341 GET 200 script 3.1 KB 385 ms 1 alerts

02:26:54.971 GET 200 stylesheet 4.5 KB 87 ms —

02:26:54.973 GET 200 stylesheet 8.7 KB 320 ms —

02:26:55.310 GET 200 font 30.3 KB 61 ms —

02:26:55.322 GET 301 script 0 B 383 ms —

02:26:55.424 GET 200 xhr 1.1 KB 130 ms 1 alerts

02:26:55.427 GET 200 xhr 1.1 KB 130 ms 1 alerts

02:26:55.581 GET 200 script 361.5 KB 138 ms —

02:26:55.588 GET 200 script 177.0 KB 128 ms 1 alerts

02:26:55.591 GET 200 script 10.6 KB 134 ms 1 alerts

02:26:55.592 GET 200 script 81.4 KB 253 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://westwoodfinancial.net/t7/0c31e6fb-0c92-4f98-a495-6baaa82be99f/dist/dynamic/3951.fe07d6646abc0f58.js

IP / ASN

34.121.35.39

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: https://westwoodfinancial.net/?affid=1337&cid=1163&email=alexis@vaccomarine.com&firstName=%7BFNAME%7D&lastName=%7BLNAME%7D&s1=9&s2=102c79638c1b0f41922ebf0022317f&s3=506

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: text/javascript
First seen (UTC): 30 Jun 2026 · 02:05:44.533 UTC
Last seen (UTC): 06 Jul 2026 · 04:08:18.284 UTC
Times seen: 13

Size: 81.4 KB (83353 bytes)
MD5: 1bb5f52b606390e2a56938fe230f71f0
SHA1: 688e579d1a11872862c0eda5ac5095453b234c22
SHA256: 4b47c06de6a062af818cedcd3fe88c745facf9f9e0e88720a085248aca6a2ce8

Certificate information

Issuer: Let's Encrypt · YR2
Subject: westwoodfinancial.net
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D0:5F:14:B2:98:45:06:F3:D0:64:43:AD:F7:2D:44:69:B2:52:6E:72
Valid from: Thu, 04 Jun 2026 12:46:14 GMT
Valid until: Wed, 02 Sep 2026 12:46:13 GMT

Technology fingerprints

Google Cloud (IaaS)
Google Cloud Storage (Miscellaneous)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /t7/0c31e6fb-0c92-4f98-a495-6baaa82be99f/dist/dynamic/3951.fe07d6646abc0f58.js HTTP/1.1
Host: westwoodfinancial.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://westwoodfinancial.net/?affid=1337&cid=1163&email=alexis@vaccomarine.com&firstName=%7BFNAME%7D&lastName=%7BLNAME%7D&s1=9&s2=102c79638c1b0f41922ebf0022317f&s3=506
Cookie: Authorization=AAH-8ZB_5_h4dO15USntojvAFeiYXol3L2YqFyzas0aIaQKFl49MEM8UJtIrH-EDE7s=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
x-guploader-uploadid: AJ5rDhH_1StWEyKScp9gGTI7zOd9TjMRUrWOFrKoi335MCcYzmtmTQ5APBQcePdXOpl6EeoEtfAFv7w
x-goog-generation: 1782854422117647
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 19367
content-encoding: gzip
x-goog-hash: crc32c=2bbRVQ==, md5=eb8KNxOEMzb4d3Asb3qtQg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 19367
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Access-Control-Allow-Origin
server: UploadServer
date: Wed, 01 Jul 2026 18:05:01 GMT
expires: Thu, 01 Jul 2027 18:05:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 Jun 2026 21:20:22 GMT
etag: "79bf0a3713843336f877702c6f7aad42"
content-type: text/javascript
vary: Accept-Encoding
age: 375714
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

02:26:55.709 GET 200 script 35.6 KB 364 ms —

02:26:55.803 GET 404 script 0 B 0 ms —

02:26:55.806 GET 200 script 459.6 KB 168 ms —

02:26:56.108 GET 404 img 121 B 128 ms 1 alerts

02:26:56.471 POST 200 xhr 0 B 146 ms 1 alerts

02:26:56.540 GET 200 img 6.0 KB 73 ms —

02:26:56.542 GET 200 img 6.1 KB 287 ms —

02:26:56.545 GET 200 img 6.3 KB 3415 ms —

02:26:56.546 GET 200 img 4.2 KB 325 ms —

02:26:56.548 GET 200 img 6.1 KB 3446 ms —

02:26:56.549 GET 200 img 7.2 KB 321 ms —

02:26:56.550 GET 200 img 10.4 KB 41 ms —

02:26:56.589 GET 200 img 137.8 KB 75 ms —

02:26:56.592 GET 200 img 2.2 KB 74 ms —

02:26:56.593 GET 200 img 2.8 KB 220 ms —

02:26:56.594 GET 200 img 4.0 KB 351 ms —

02:26:56.611 GET 200 font 30.3 KB 23 ms —

02:27:00.104 POST 201 xhr 497 B 284 ms —

02:27:00.396 GET 200 script 116.5 KB 33 ms —

02:27:00.533 POST 204 xhr 0 B 187 ms —

02:27:00.543 POST 204 xhr 0 B 177 ms —

02:27:02.131 POST 204 xhr 0 B 94 ms —

http://engage.freshmarketadvantage.com/aff_c?offer_id=506&aff_id=9&aff_sub=A1G1&aff_sub2=alexis@slurpmail.net&aff_sub3=&aff_sub4=crispymoment&aff_sub5=vaccomarine.com&resid=&email=alexis@vaccomarine.com

Domain graph

Hostnames

Connections