{"report_id":"afa5552c-0a01-42b6-a42a-044d3694aa3c","version":6,"status":"done","tags":[],"date":"2025-11-05T05:41:55Z","url":{"schema":"http","addr":"app.betterthanworse.com/campaigns/ro013hf9cw947/track-url/cd163s9wrce22/4d719505459ae6e0bd739267fa24e0b389dc5993","fqdn":"app.betterthanworse.com","domain":"betterthanworse.com","tld":"com"},"ip":{"addr":"104.21.89.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"westwoodfinancial.net/#/secure?nt=3252","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"title":"Westwood Financial","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.betterthanworse.com/campaigns/ro013hf9cw947/track-url/cd163s9wrce22/4d719505459ae6e0bd739267fa24e0b389dc5993","fqdn":"app.betterthanworse.com","domain":"betterthanworse.com","tld":"com"},"ip":{"addr":"104.21.89.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-10T05:41:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"dfgtrk5.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-04","alert":"Phishing Block","trigger":"dfgtrk5.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"dfgtrk5.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.trustedform.com","ip":{"addr":"3.167.2.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-02-13","domain_rank":163006,"first_seen":"2020-08-26T23:38:48Z","last_seen":"2025-11-04T00:49:43.045603Z","alert_count":0,"request_count":2,"received_data":132161,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"res.cloudinary.com","ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2025-11-02T23:59:07.870712Z","alert_count":0,"request_count":11,"received_data":208413,"sent_data":6325,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.trustedform.com","ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2009-02-13","domain_rank":151305,"first_seen":"2012-10-29T05:30:13Z","last_seen":"2025-11-03T08:18:49.177212Z","alert_count":0,"request_count":4,"received_data":21582,"sent_data":2169,"comment":"","tags":null,"fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":2,"received_data":63654,"sent_data":1218,"comment":"","tags":null,"fingerprints":null},{"fqdn":"engage.freshmarketadvantage.com","ip":{"addr":"99.81.210.173","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-01-18","domain_rank":0,"first_seen":"2021-08-30T22:52:42Z","last_seen":"2025-10-29T18:44:11.84811Z","alert_count":0,"request_count":1,"received_data":52324,"sent_data":687,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.westwoodfinancial.net","ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2019-02-21","domain_rank":0,"first_seen":"2022-07-17T00:07:10Z","last_seen":"2025-10-30T00:07:50.448653Z","alert_count":0,"request_count":9,"received_data":1547738,"sent_data":4862,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":1,"received_data":5308,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"westwoodfinancial.net","ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2019-02-21","domain_rank":4924165,"first_seen":"2019-04-14T12:28:53Z","last_seen":"2025-10-30T00:07:50.426763Z","alert_count":0,"request_count":3,"received_data":51857,"sent_data":1930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.betterthanworse.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-22","domain_rank":0,"first_seen":"2024-09-20T09:01:22Z","last_seen":"2025-11-05T05:41:56.402922Z","alert_count":0,"request_count":1,"received_data":51690,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":3,"received_data":728322,"sent_data":1360,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dfgtrk5.com","ip":{"addr":"34.102.181.184","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-11-19","domain_rank":4054305,"first_seen":"2019-06-27T16:53:09Z","last_seen":"2025-10-30T15:08:11.429216Z","alert_count":3,"request_count":1,"received_data":50946,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c64da34b0e57616cca9cbdf6d8887a6d","sha1":"34ee7503602ef62c922c42e510828c488b2aba87","sha256":"aa5dd6ddcb1892f8f51a3bca4b865d72d98b4342d058d0728cdc54065b9c0715","sha512":"796403e461df4b4d0062e0252b1a855ea97ce5588b97aa64c812482109dee77842a4eab2b7ae8cdc557d202e28687994a1cd88362220189543190c2c3a93365b","ssdeep":"","tlshash":"c370008a00c0220820202280220b2f22200203280080002000a8828820a208b300208c","size":22,"data":"","first_seen":"2023-03-07T01:33:14Z","last_seen":"2026-04-04T16:19:49.531754Z","times_seen":8850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02906eef6614a66e721e4e74cfb8debe","sha1":"2ff7db2d9316324619659ffeda641ff1c46bc6e4","sha256":"824db9af5685fcce9ecea002d01a840c78ffec07f012c81e1028bc17c94c2cee","sha512":"d2de15fda35560bf5e7203a4bece3baa879a56b2d262b015efa594085d58060a9f4bb39c46889a0d3ba4bcf3d1a4ca98f07b170941d86d2acabfe733145b3605","ssdeep":"","tlshash":"4cf0d4516d840b3cd34f01b6a5bfd226b12d11547e45cd15d259c461792cee0041574c","size":473,"data":"","first_seen":"2023-03-13T02:36:36Z","last_seen":"2026-04-04T16:19:49.532393Z","times_seen":8850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T17:46:02.480075Z","times_seen":770952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a82cc53d1c9b98ab1c4d8c5eaa677c8e","sha1":"8f665f0a37c8490156b8d342d7686a33befd1079","sha256":"a6260674dd69caea8ec9afd24022b7a3a8925e33fbf48f8b780eaaeeb4f9ab43","sha512":"7b81955ae323b1121bd6292b25b31dfd7b4e69605c7cd625ba433dafa4e74e444dcb2a23ae7a2091997898ba99d48984287bc29dd3d5a7496c8a9b1a2de5fc03","ssdeep":"","tlshash":"29c02bcc26060c73c1e727500f2ff240b1012300d6e00c33090573445b20c579748c00","size":145,"data":"","first_seen":"2023-03-07T01:33:14Z","last_seen":"2026-04-04T16:19:49.533656Z","times_seen":8785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/1130.0845a7084111a8f2.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7954221d3e8cc16e51045b0b027b67a","sha1":"b9ea97e6c191c3eecf088898ba0377ccad21438b","sha256":"1502b5646834e9cec464e2fe1dca01c383dd021abedefde94d3f03ebfd4ed989","sha512":"6143d4b7690908d50c7bb55125c77d30724de2f6af221e58400ac40747d351e89b6cb41d95f3e6d062ea46f5000c6ea7a875ef381b7cb1bc2b442b6789ba3bfe","ssdeep":"768:YHCEAU59uZkVEF8uqsah5QDT4qgWdE+u9ZOUR64ivtdghODCDODxRiiSd4SDddDv:zzkP3spilOFFAD/id8PFhH","tlshash":"e5835b5795e123f893e310b8e67baa01626c6d04b90a40d8f66ccd9d33dcda85277b3d","size":80767,"data":"","first_seen":"2025-11-04T23:20:39.27333Z","last_seen":"2025-11-11T13:44:19.341129Z","times_seen":2268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z1EMQ8T80Q\u0026cx=c\u0026gtm=4e5b31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a1a4e05674c07372d970fd2e7dd7fa","sha1":"532f2b52f704f3b177efa05fcf3b49031432e836","sha256":"d0242b9628cae39bc868b71f095bbf57dd0ddb5fef2659920de883da815ca822","sha512":"57b4e808473051b2b4e4ebab1cf3ef545960663ffc2478a6f0f514608a245b90be083f70f6f53740f8c8eb080f2d8e7fe682d23cd2c10a9faac632c73567fb41","ssdeep":"6144:UKWF4XIN1tyXRnNaBOgpmbv7dQIYh4OxPK3Q1:UBFWm2XRnNCGYhl","tlshash":"7a9409ce73c674265396e478503f018ba57b28a2f49cc899f189cce42e7069a4277f7d","size":411754,"data":"","first_seen":"2025-11-04T23:20:39.258353Z","last_seen":"2025-11-05T07:49:06.85835Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/trustedform.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b2edc0dfb1e229baca7594ec384a21d","sha1":"6da2db7e652c42ea9c23ce8d4ad8eee60a6a81b7","sha256":"72981788d878e32f4dcc70bf448796ddb66217d0f30243fae121883bcf5e77fd","sha512":"8fa0767284a306c81467fd9bf283e155187ee70503b520f2c1b213566811dd8bf211743da43d07cb00f35ce8c259e8263521e32373f8ee861dbfd3b9708b5ab6","ssdeep":"384:uJ5BLkGVfK5k/QoJ69cdlYo4kVW1Wk0PfTKoT2VUSoAs7By7fSaDpUp6bX:uJ5BgUfK5YX69cdlYo4kVW1Wk0PfTKo0","tlshash":"c4921a4ab7a8b43d0b6721f2a13f920bf3712525390b90504269c9f43e79d8f961bf9d","size":19915,"data":"","first_seen":"2025-10-17T19:51:00.270355Z","last_seen":"2025-11-05T16:58:47.726197Z","times_seen":3985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/trustedform-1.10.26.js","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00bce104832d343e69d5e4c36b0e7a75","sha1":"c8a80e3313d94cedc14599071aeff463e4658daf","sha256":"5390adfe0a060d2de427bfffe94bb17643f8f63dc55aa8a59c657f3f9fa3004b","sha512":"4adacbaff4e162ab60c1f46e79ae48e8495e6e2f7d996345484afb7077bf3ef6bbda0c10f874065f77a0266c3668d2e5fc8d6a6efefaa69bc880c4f18c7743b1","ssdeep":"1536:/f6r5ytaL5StlSx/zVXh5HE3AaSkyY2cvTnfVsyx4:/f61yFSxzVxmAagjcvZsym","tlshash":"60b318cc77c6b07b0ba370b1416f414bb23a6915688ea451d215f8e43c7894fa63bfad","size":111206,"data":"","first_seen":"2025-10-17T19:51:00.363398Z","last_seen":"2025-11-05T16:58:47.724352Z","times_seen":3976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/runtime.5e131af6b880d1b6.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bef2457b4b9179e34cd96ac6be6aeaff","sha1":"c5e43aee9136f4a7c1f0494cce059bfadbdf8a03","sha256":"09c77f8c34f7a9524fdde064bf41f9c428462d76cab876fa89b761114f40589e","sha512":"ef5e7c7873da096dd629400d1dc78fc4d03fb328d3fe5af74c4de1cae1831b1bff2d3483195ed94667e298ceabade1b300c715bf5b6936ea291aec4dfa326822","ssdeep":"","tlshash":"f351e9f42224fef62ba548c06c3d94e5b5243033556bace2d71bdc16b62cde04559f71","size":3155,"data":"","first_seen":"2025-11-04T17:50:04.085541Z","last_seen":"2025-11-05T20:29:01.337112Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/main.f7a239c2d11b68ab.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"864a0e8b5ba3d8d6a7492aa08811675d","sha1":"1a88966818217eebe174d14e679134942521069f","sha256":"475de1875605ad039b91fb06e13a6e04a75d75056acd7343091658e9e132a81d","sha512":"02e9a4227ef809ba1065fdde652b1ce640a2f7e294123a5c8821d6dcac0e791365e90300dbe075477178d338241ff867a160adc65f8aa547fd47fd9edb328a80","ssdeep":"24576:eO29baK7VEeQE1hKzX7fg4VegUkkknqShk8cP7qysORsTY8aq9xu5pHOc5clFMnf:7eg3kknqShk8cP7qysORsTY8aq9xu5pR","tlshash":"39154ad67295702647d700e6517b4543f22d2844790984acfaaccdee3bb8d48a3bbb7c","size":885406,"data":"","first_seen":"2025-11-04T17:50:04.118687Z","last_seen":"2025-11-05T20:29:01.33664Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/polyfills.426d8f8069b0e02d.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4e8da647e1bb7bb7c4b5b26a0690a2c","sha1":"fea1df4ad6abda1288ed44112a914c98b45e8d51","sha256":"68ebd42a00fbf307335b7b258a9e6c27a0eac10f826934fb1fde770cfb6f19a2","sha512":"6f3509c382ff54547be185952e56e6083f1bab1228d386a47d1dfd2c142dea9683eabaae3fd183960692c2c1e79990d9dba8fc5f43891b1215e56ab1b4ab2e7f","ssdeep":"768:qZtyWbSxewTodTTlHJVqMcgf9cRaMi3ZTS/vdNgE2DSJiaYNE//aEhOQty5R4Gfl:nVZqZn6R6etATNLDoWR59","tlshash":"8833f7da7392b0a247b3a0e6917f8407f22529a4785cc8f4e61f89d53c7a049d167f2e","size":54469,"data":"","first_seen":"2025-06-03T15:20:31.980426Z","last_seen":"2026-04-04T16:19:49.527729Z","times_seen":8803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/5094.748084c728ef9183.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17cf54aa8e2b69e38c3a2f3fcb84f758","sha1":"e0bc37da928c77325b0da41b58ecb8093755645e","sha256":"10026cd2bdcf571bb976653e082fe87637829db076fa70c30986ba7514a94a88","sha512":"ec3532bc1e43bab0ba666719cd737a38586ab24a2155f0684ec4c6398b5f52c7f50c794f46e46242fdf5edd8b5bc2204aaf4ec01b67c09816d5a6798eb922057","ssdeep":"3072:U8H++xR7hYSe1K9OXj90X3qlC+gy2+g74pv1342h80c9rRYc:9HVx5u1K8XjWXahc9rRYc","tlshash":"f004face3161352a43b550b1c93a090fb62e4d84a00d867dfb7c99cfb66d95812bef78","size":181549,"data":"","first_seen":"2025-10-29T14:43:55.912551Z","last_seen":"2026-02-09T17:58:00.643959Z","times_seen":4467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-128685315-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd651316f137280463f0e84b41998e52","sha1":"0be6ac51ceaef11be5bfbadef57e5cc2260690d0","sha256":"af63f549e622e2d1f69ce151e4a26abacf525ae020b34cdabd1c27fec5aa5a5e","sha512":"b8884bb6bc66c052e642b9042ba935b7532baa89ff56317871151e481b4e23afbecc1f8d8e2b60fad89349553ea046a7fbf426b606a07c73c57b1be0b3973090","ssdeep":"3072:Zequ2ysvXV4K/09814DeQ64FqVrPitpmHbrmvsROgpmbv7dBG4Yhc9713D8Oq:EWF4zN1twOvWOgpmbv7dQ4YhcZ13D8Oq","tlshash":"8264f7cd73d6742683a3a478503f018bb17a69d1f88cc895e186dcd42e70aaa4277f7d","size":315107,"data":"","first_seen":"2025-11-04T23:20:39.255266Z","last_seen":"2025-11-05T07:49:06.85027Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/sandbox%20eval%20code","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T17:46:02.425893Z","times_seen":772502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/env.json","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/env.json HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOGqaOLJ9F3Gz_HycDhHpKz9PjJ16T18y-zqDLe-zb3CCx1nd2iDQ7e3_nWEEFm3KSo7u_o1WS8\r\nx-goog-generation: 1762205722854803\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 452\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=U7VuBg==, md5=VcTIamWyG/LGwPyR0HJQBA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 452\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Wed, 05 Nov 2025 00:26:14 GMT\r\nexpires: Thu, 05 Nov 2026 00:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:35:22 GMT\r\netag: \"55c4c86a65b21bf2c6c0fc91d0725004\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nage: 18918\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a62856e6b85c4bf8cedeca2282ecb92c","sha1":"384c0406307f09185f14f275a64c4ff7769d5e65","sha256":"0b1a8b7bfe455ab93fdf370ceea3512b29fb4302634f5b35b8dc0f226252d34c","sha512":"fcebfe7332869ffd9c77ea454098f8e1335b42cc8ee8488c851d51548ce9d0266cb7a8be1c76e45dad9dc41fb1757416df86070f2e6238e41bc097f5127852a1","ssdeep":"","tlshash":"3d21b124d0381d7701e130d855ef0e43a5a5896b0e903d72ba1d07ce0f4d53e647b34c","first_seen":"2025-08-28T12:32:20.569015Z","last_seen":"2026-04-04T16:19:49.512037Z","times_seen":548,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/trustedform-1.10.26.js","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:33.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Tue, 10 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:54:2A:17:15:5E:25:8E:83:28:1E:11:46:BC:0D:35:08:6E:B5:44","sha256":"D9:BF:A7:21:D0:CC:C5:30:96:23:75:3E:EB:A8:D3:29:C6:80:7E:94:A4:29:D1:19:E1:44:9C:74:19:07:4C:45"}}},"request":{"raw":"GET /trustedform-1.10.26.js HTTP/1.1\r\nHost: cdn.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 17 Oct 2025 18:51:19 GMT\r\nx-amz-version-id: kr7Oj_JST3ZZakpr6TrexO.VEiJ0rEvk\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Wed, 05 Nov 2025 05:41:33 GMT\r\netag: W/\"00bce104832d343e69d5e4c36b0e7a75\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FQhSqAzGtwD51C7SNqhJ_e2XOLOnVr4ttT0PFCKTp6g6MYyQPQpKlQ==\r\nage: 13\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00bce104832d343e69d5e4c36b0e7a75","sha1":"c8a80e3313d94cedc14599071aeff463e4658daf","sha256":"5390adfe0a060d2de427bfffe94bb17643f8f63dc55aa8a59c657f3f9fa3004b","sha512":"4adacbaff4e162ab60c1f46e79ae48e8495e6e2f7d996345484afb7077bf3ef6bbda0c10f874065f77a0266c3668d2e5fc8d6a6efefaa69bc880c4f18c7743b1","ssdeep":"1536:/f6r5ytaL5StlSx/zVXh5HE3AaSkyY2cvTnfVsyx4:/f61yFSxzVxmAagjcvZsym","tlshash":"60b318cc77c6b07b0ba370b1416f414bb23a6915688ea451d215f8e43c7894fa63bfad","first_seen":"2025-10-17T19:51:00.363398Z","last_seen":"2025-11-05T16:58:47.724352Z","times_seen":3976,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared.css","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared.css HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHUT52Ai_a9KSmj4nCkdHv1ZrQhMXB1WZR-VUKXcO-wU2RAkVXQ7D59eft_83p8XqM\r\nx-goog-generation: 1762206128088861\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 27715\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=so06ag==, md5=lk5FJ+vQb56iv6sWdRDbXQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 27715\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Access-Control-Allow-Origin\r\nserver: UploadServer\r\ndate: Tue, 04 Nov 2025 17:28:49 GMT\r\nexpires: Wed, 04 Nov 2026 17:28:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:08 GMT\r\netag: \"964e4527ebd06f9ea2bfab167510db5d\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 43963\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":158593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"5b383e1f39b2ed446a54e21cacb35dbc","sha1":"b690baf7aebb69011a219a353f70191cf510dd5e","sha256":"623e4beab5eac09474a6524eb3da4dc7f04753954ede4a4bee4df63970856251","sha512":"b4ac44ad6e4b241be0b7d020094028b980bcb460e56b67e7c7890dd1aad7896c5d4c8ba288e2073eaaf9d50673e8f3de15a76e69778f0ddd1f7018c15d083a5f","ssdeep":"768:DzpGxwXsIHriQ3ZFFsZI69HZyiqPeFbk1NFebrbBND9+AMvhkzUyGiO4sQ1Nap4p:KwXjlYI69HZyiqOk34NMfy0DT7GCd54","tlshash":"55f3b560f62030aa3373c16975d0fecb271aa043d5664eb7f16f65e84b885ca1673f1a","first_seen":"2025-11-04T17:50:04.122095Z","last_seen":"2026-03-04T11:23:56.379488Z","times_seen":5852,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":51,"dns":19,"connect":12,"send":0,"wait":13,"receive":12,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/westwoodfinancial.net.css","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/westwoodfinancial.net.css HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOELNV2pHaIVYdqToNtcdAjZXo6Nrp1GXS-HRc6x6PjffVl-1kL9JxnaMXw3pBMhed9iitk5xRY\r\nx-goog-generation: 1762206125569538\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 29468\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=bl82pQ==, md5=neKxKsw5IwwTvDBJ5Gwm1A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 29468\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Access-Control-Allow-Origin\r\nserver: UploadServer\r\ndate: Wed, 05 Nov 2025 00:26:13 GMT\r\nexpires: Thu, 05 Nov 2026 00:26:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:05 GMT\r\netag: \"9de2b12acc39230c13bc3049e46c26d4\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 18919\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":172815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65289)","md5":"7ef7668273eb54bb9468ae734b5e6a31","sha1":"82c1a069644b82494065ef37f877d1dffd06b8d4","sha256":"6efb761d4e29958d55a1d19002d06828cc43bc44f6ae8acad0292734366d2b30","sha512":"e3e5a6ea8083639c3193b44b782828c7045aad3fbf7cd781a1dbe6616ad6f1ec3cdbc25ed47539d7fb7ef3f84f0f7097be08420aa87f076b77b73d57c5b2a66e","ssdeep":"1536:0wXjl+I69HZyiqOk34NMfy0DT7GCd57y0x:d0ahzGEy0x","tlshash":"4ef3b651f52030ae3273c16971d0fedb2729a042d9664fb6f12f76e84b885ca1273f5a","first_seen":"2025-11-05T00:26:43.597348Z","last_seen":"2025-11-05T19:43:50.27353Z","times_seen":50,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":52,"dns":18,"connect":14,"send":0,"wait":24,"receive":5,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/polyfills.426d8f8069b0e02d.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/polyfills.426d8f8069b0e02d.js HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOFf9zr07qWD-Dsr1et1jolck1b0GG5IqDPNL1oUUOhDcKqJheqoJxvOMUm3LwRibv_E-7x27Ks\r\nx-goog-generation: 1762206173713643\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 19327\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=j8C2lw==, md5=6t8fLjEiftcAfmMsyk1x8w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 19327\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Tue, 04 Nov 2025 17:28:49 GMT\r\nexpires: Wed, 04 Nov 2026 17:28:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:53 GMT\r\netag: \"eadf1f2e31227ed7007e632cca4d71f3\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 43963\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":54469,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (54469), with no line terminators","md5":"d4e8da647e1bb7bb7c4b5b26a0690a2c","sha1":"fea1df4ad6abda1288ed44112a914c98b45e8d51","sha256":"68ebd42a00fbf307335b7b258a9e6c27a0eac10f826934fb1fde770cfb6f19a2","sha512":"6f3509c382ff54547be185952e56e6083f1bab1228d386a47d1dfd2c142dea9683eabaae3fd183960692c2c1e79990d9dba8fc5f43891b1215e56ab1b4ab2e7f","ssdeep":"768:qZtyWbSxewTodTTlHJVqMcgf9cRaMi3ZTS/vdNgE2DSJiaYNE//aEhOQty5R4Gfl:nVZqZn6R6etATNLDoWR59","tlshash":"8833f7da7392b0a247b3a0e6917f8407f22529a4785cc8f4e61f89d53c7a049d167f2e","first_seen":"2025-06-03T15:20:31.980426Z","last_seen":"2026-04-04T16:19:49.527729Z","times_seen":8803,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":48,"dns":17,"connect":14,"send":0,"wait":13,"receive":4,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito+Sans:300,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css?family=Nunito+Sans:300,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.westwoodfinancial.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 05 Nov 2025 05:41:32 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"144301056f4e05a222db6ce9683368f0","sha1":"fcc9437a0407eb7f9c38966ce423552411c202f6","sha256":"a446fb67390165a3d316657702f66ecb6a66a2ba5df3ae41d393b55d837e3ccc","sha512":"1da1184280e533442e151de073e6d173be2e81c1157adb279ec0d5487590fe029dfaba4435869894ee6ff06f53f2b9b6bf3890d089965ebcd7ecb4d4e2ea179a","ssdeep":"96:kO1bavc30O1bavczFZO1O1bavchO1bavcFJc+uBO1bavcv6NxOEbavc30OEbavc5:Wvc3mvcKTvcHvct8vcvxvc3DvcK2vcCX","tlshash":"b791ce90043a5494da037cc233dfbf3aaf5fa0512026d43dbbf894999caac6a5365b4d","first_seen":"2025-09-17T01:57:41.253376Z","last_seen":"2026-04-04T16:19:49.517896Z","times_seen":4222,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":89,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/1130.0845a7084111a8f2.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/1130.0845a7084111a8f2.js HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AOCedOEH0YukBWFLjttw_hrDXLXaF9CBGlrwC6aUmbiD9wP7cjmwOOdCveTpxzw7_V5D2UehAsr2h8k\r\nx-goog-generation: 1762206142905365\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 19234\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=JsJbJA==, md5=guyeK8xsBdYOobTNwalNDA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 19234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Tue, 04 Nov 2025 21:00:45 GMT\r\nexpires: Wed, 04 Nov 2026 21:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:22 GMT\r\netag: \"82ec9e2bcc6c05d60ea1b4cdc1a94d0c\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 31247\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":80767,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7954221d3e8cc16e51045b0b027b67a","sha1":"b9ea97e6c191c3eecf088898ba0377ccad21438b","sha256":"1502b5646834e9cec464e2fe1dca01c383dd021abedefde94d3f03ebfd4ed989","sha512":"6143d4b7690908d50c7bb55125c77d30724de2f6af221e58400ac40747d351e89b6cb41d95f3e6d062ea46f5000c6ea7a875ef381b7cb1bc2b442b6789ba3bfe","ssdeep":"768:YHCEAU59uZkVEF8uqsah5QDT4qgWdE+u9ZOUR64ivtdghODCDODxRiiSd4SDddDv:zzkP3spilOFFAD/id8PFhH","tlshash":"e5835b5795e123f893e310b8e67baa01626c6d04b90a40d8f66ccd9d33dcda85277b3d","first_seen":"2025-11-04T23:20:39.27333Z","last_seen":"2025-11-11T13:44:19.341129Z","times_seen":2268,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/cash","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/cash HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4142\r\ncontent-disposition: inline; filename=\"cash.webp\"\r\netag: \"46f31e52205e10bf3821fc8d6def8f35\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: c589420615934c4138c84b75abe99db0\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.849Z;desc=hit,rtt;dur=7,content-info;desc=\"width=150,height=150,bytes=4142,format=\\\"webp\\\",owidth=150,oheight=150,obytes=13692,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205721,ef=(1,11,13,17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46f31e52205e10bf3821fc8d6def8f35","sha1":"dd163a13d95302e371b4c9a5a5e8a55efa5b12bf","sha256":"0538277838ee94ebb8449b629f9acf56a8f142dbbd7e9cb7b2306872bee593b9","sha512":"d8b23d4b3b158878547348a55da616e93290ff70619c6f87b3261f33b368dfa6c0473831edeec0dd85cc2d4f67137ce41f917756b9eaf9b9cd0da84bc1cf9d4c","ssdeep":"96:OMkZznxXFg6ZVcMutJn/Y1jtAZe4Id0W1lx1/ifVLXeNqcWa:OMk9nxXFg6v/aJnl84A0W1lXmXeN5Wa","tlshash":"c4817eb6f185fbfb060a7c83c623c9512e957a91160a7362c24d8c312923db58a69f19","first_seen":"2025-06-26T04:07:01.418967Z","last_seen":"2026-04-04T16:19:49.523207Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/bootstrap.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Tue, 10 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:54:2A:17:15:5E:25:8E:83:28:1E:11:46:BC:0D:35:08:6E:B5:44","sha256":"D9:BF:A7:21:D0:CC:C5:30:96:23:75:3E:EB:A8:D3:29:C6:80:7E:94:A4:29:D1:19:E1:44:9C:74:19:07:4C:45"}}},"request":{"raw":"GET /bootstrap.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false HTTP/1.1\r\nHost: cdn.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://westwoodfinancial.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 05 Nov 2025 05:41:34 GMT\r\nlast-modified: Fri, 17 Oct 2025 18:51:18 GMT\r\nx-amz-version-id: ilnSjLhBarf8MIkuJAOVrVOewtkbgpD7\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\netag: W/\"2b2edc0dfb1e229baca7594ec384a21d\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Z56hgxlvnXYv0X7pe6lv2b5-8VK8e9fI85pOqKZ1fYu7PyO8F_Qf9w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19914)","md5":"2b2edc0dfb1e229baca7594ec384a21d","sha1":"6da2db7e652c42ea9c23ce8d4ad8eee60a6a81b7","sha256":"72981788d878e32f4dcc70bf448796ddb66217d0f30243fae121883bcf5e77fd","sha512":"8fa0767284a306c81467fd9bf283e155187ee70503b520f2c1b213566811dd8bf211743da43d07cb00f35ce8c259e8263521e32373f8ee861dbfd3b9708b5ab6","ssdeep":"384:uJ5BLkGVfK5k/QoJ69cdlYo4kVW1Wk0PfTKoT2VUSoAs7By7fSaDpUp6bX:uJ5BgUfK5YX69cdlYo4kVW1Wk0PfTKo0","tlshash":"c4921a4ab7a8b43d0b6721f2a13f920bf3712525390b90504269c9f43e79d8f961bf9d","first_seen":"2025-10-17T19:51:00.270355Z","last_seen":"2025-11-05T16:58:47.726197Z","times_seen":3985,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":282,"dns":34,"connect":1,"send":0,"wait":377,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/api/v1/userApplication/pageView?pageId=eb75f0ba-a91d-4618-a15d-ab965e60d86e","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"POST /api/v1/userApplication/pageView?pageId=eb75f0ba-a91d-4618-a15d-ab965e60d86e HTTP/1.1\r\nHost: westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nCookie: Authorization=AAHYTXIT9z5VyudbEF3V_7BGneupyc7o6D2NFuWitUtXpCPhMMJ3CPZmml7rDu1Qj0s=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-length: 0\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/f64fa1da581733b2747bf1b89649dc55579a57b7/snapshot","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/f64fa1da581733b2747bf1b89649dc55579a57b7/snapshot HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 20363\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 05 Nov 2025 05:41:34 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.betterthanworse.com/campaigns/ro013hf9cw947/track-url/cd163s9wrce22/4d719505459ae6e0bd739267fa24e0b389dc5993","fqdn":"app.betterthanworse.com","domain":"betterthanworse.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T05:41:30.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterthanworse.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 18:45:21 GMT","end":"Sat, 10 Jan 2026 19:39:03 GMT"},"fingerprint":{"sha1":"99:2D:45:C7:79:63:A5:DF:C7:97:D2:06:CA:47:D5:B0:BF:C6:72:E8","sha256":"FD:B2:3C:95:A5:C8:CE:B4:81:7D:F1:62:78:C6:80:38:80:C0:C9:0C:F7:B0:B3:76:72:4F:C5:AF:9E:FA:FB:3C"}}},"request":{"raw":"GET /campaigns/ro013hf9cw947/track-url/cd163s9wrce22/4d719505459ae6e0bd739267fa24e0b389dc5993 HTTP/1.1\r\nHost: app.betterthanworse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 05 Nov 2025 05:41:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://engage.freshmarketadvantage.com/aff_c?offer_id=305\u0026aff_id=9\u0026aff_sub=S3G1\u0026aff_sub2=slester@flyrichmond.com\u0026aff_sub3=[SOURCEID]\u0026aff_sub4=betterthanworse\u0026aff_sub5=flyrichmond.com\u0026resid=[RESID]\u0026email=slester@flyrichmond.com\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlast-modified: Wed, 05 Nov 2025 05:41:30 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yErkOgt2DjyJu7epQVHdl7eHBetWriG9t6TMJh%2BEImuXOThvyEM2wWxQJ0JfdlHz6voor4KLhXs%2F%2BDTXhO1tENFS98oDn%2FodWYq2oA1kIlpaNdbsgQ%3D%3D\"}]}\r\nset-cookie: mwsid=8qnc4pvomgcvt8rcg4moqqdnk7; HttpOnly; Path=/\r\ncf-ray: 999a05c15dc0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":28,"dns":9,"connect":1,"send":0,"wait":282,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/main.f7a239c2d11b68ab.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/main.f7a239c2d11b68ab.js HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOGO2cGlSt2cjKWXEvVIQDiOlbbPFkST6HkItc7Dnwwr0xaybNMi2PPHeMR0mzJFeuvYw9Kadlw\r\nx-goog-generation: 1762206170042134\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 252075\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=WBZ4Tg==, md5=JzTxK/JsXTM/xX9+7jr40w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 252075\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Wed, 05 Nov 2025 04:13:33 GMT\r\nexpires: Thu, 05 Nov 2026 04:13:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:50 GMT\r\netag: \"2734f12bf26c5d333fc57f7eee3af8d3\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 5279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":885406,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"864a0e8b5ba3d8d6a7492aa08811675d","sha1":"1a88966818217eebe174d14e679134942521069f","sha256":"475de1875605ad039b91fb06e13a6e04a75d75056acd7343091658e9e132a81d","sha512":"02e9a4227ef809ba1065fdde652b1ce640a2f7e294123a5c8821d6dcac0e791365e90300dbe075477178d338241ff867a160adc65f8aa547fd47fd9edb328a80","ssdeep":"24576:eO29baK7VEeQE1hKzX7fg4VegUkkknqShk8cP7qysORsTY8aq9xu5pHOc5clFMnf:7eg3kknqShk8cP7qysORsTY8aq9xu5pR","tlshash":"39154ad67295702647d700e6517b4543f22d2844790984acfaaccdee3bb8d48a3bbb7c","first_seen":"2025-11-04T17:50:04.118687Z","last_seen":"2025-11-05T20:29:01.33664Z","times_seen":959,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":72,"dns":12,"connect":25,"send":0,"wait":14,"receive":42,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/env.json","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/env.json HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOGqaOLJ9F3Gz_HycDhHpKz9PjJ16T18y-zqDLe-zb3CCx1nd2iDQ7e3_nWEEFm3KSo7u_o1WS8\r\nx-goog-generation: 1762205722854803\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 452\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=U7VuBg==, md5=VcTIamWyG/LGwPyR0HJQBA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 452\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Wed, 05 Nov 2025 00:26:14 GMT\r\nexpires: Thu, 05 Nov 2026 00:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:35:22 GMT\r\netag: \"55c4c86a65b21bf2c6c0fc91d0725004\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nage: 18918\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a62856e6b85c4bf8cedeca2282ecb92c","sha1":"384c0406307f09185f14f275a64c4ff7769d5e65","sha256":"0b1a8b7bfe455ab93fdf370ceea3512b29fb4302634f5b35b8dc0f226252d34c","sha512":"fcebfe7332869ffd9c77ea454098f8e1335b42cc8ee8488c851d51548ce9d0266cb7a8be1c76e45dad9dc41fb1757416df86070f2e6238e41bc097f5127852a1","ssdeep":"","tlshash":"3d21b124d0381d7701e130d855ef0e43a5a5896b0e903d72ba1d07ce0f4d53e647b34c","first_seen":"2025-08-28T12:32:20.569015Z","last_seen":"2026-04-04T16:19:49.512037Z","times_seen":548,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-128685315-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=UA-128685315-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\nexpires: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 110038\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":315107,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"bd651316f137280463f0e84b41998e52","sha1":"0be6ac51ceaef11be5bfbadef57e5cc2260690d0","sha256":"af63f549e622e2d1f69ce151e4a26abacf525ae020b34cdabd1c27fec5aa5a5e","sha512":"b8884bb6bc66c052e642b9042ba935b7532baa89ff56317871151e481b4e23afbecc1f8d8e2b60fad89349553ea046a7fbf426b606a07c73c57b1be0b3973090","ssdeep":"3072:Zequ2ysvXV4K/09814DeQ64FqVrPitpmHbrmvsROgpmbv7dBG4Yhc9713D8Oq:EWF4zN1twOvWOgpmbv7dQ4YhcZ13D8Oq","tlshash":"8264f7cd73d6742683a3a478503f018bb17a69d1f88cc895e186dcd42e70aaa4277f7d","first_seen":"2025-11-04T23:20:39.255266Z","last_seen":"2025-11-05T07:49:06.85027Z","times_seen":171,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":97,"dns":2,"connect":21,"send":0,"wait":41,"receive":51,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/5094.748084c728ef9183.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/5094.748084c728ef9183.js HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AOCedOFvJEI6JVcjTBb2tLO2mgsS4U9VJoD5-z8mLg4NpdI_lPv42YdRJ4gJBUIKyxnX5FnfjmWDdFU\r\nx-goog-generation: 1762206173413492\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 42958\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=eFk0cg==, md5=zlbbuBqdHZMVDSAWI0uwPg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 42958\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Tue, 04 Nov 2025 21:00:45 GMT\r\nexpires: Wed, 04 Nov 2026 21:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:53 GMT\r\netag: \"ce56dbb81a9d1d93150d2016234bb03e\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 31247\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":181549,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"17cf54aa8e2b69e38c3a2f3fcb84f758","sha1":"e0bc37da928c77325b0da41b58ecb8093755645e","sha256":"10026cd2bdcf571bb976653e082fe87637829db076fa70c30986ba7514a94a88","sha512":"ec3532bc1e43bab0ba666719cd737a38586ab24a2155f0684ec4c6398b5f52c7f50c794f46e46242fdf5edd8b5bc2204aaf4ec01b67c09816d5a6798eb922057","ssdeep":"3072:U8H++xR7hYSe1K9OXj90X3qlC+gy2+g74pv1342h80c9rRYc:9HVx5u1K8XjWXahc9rRYc","tlshash":"f004face3161352a43b550b1c93a090fb62e4d84a00d867dfb7c99cfb66d95812bef78","first_seen":"2025-10-29T14:43:55.912551Z","last_seen":"2026-02-09T17:58:00.643959Z","times_seen":4467,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/ssl","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/ssl HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6402\r\ncontent-disposition: inline; filename=\"ssl.webp\"\r\netag: \"cd6f0641ba0a21ade2f8eff4ccca7224\"\r\nlast-modified: Tue, 04 Nov 2025 16:01:00 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: be3d88374b7acb590bcd648f02ae0d55\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=9;start=2025-11-05T05:41:32.857Z;desc=hit,rtt;dur=2,content-info;desc=\"width=800,height=358,bytes=6402,format=\\\"webp\\\",owidth=800,oheight=358,obytes=17609,oformat=\\\"png\\\",crt=1762272059,ocrt=1762206162,ef=(1,11,13,17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd6f0641ba0a21ade2f8eff4ccca7224","sha1":"24c574d11879cd467317515085b9b70fe22bcccc","sha256":"abf14bb4dca5ed50dbb3a0e8254fd80e67bdd1574337750ee3fc285df572541d","sha512":"aa9d0f1efd97f3003acfdfc011cb3b2d8b64d409b74a4e12fbf36d5881da8c70fd4e13454d5ba7e12656899a817af07dd8af57002c9789046709355c9cbf9493","ssdeep":"96:Ec7+YUaumddgSz2DXHURiv66/OGcljnVYEdmkr/xgLUuhCy6nz/AgoefQ/MF+p2V:D7+Y+SiHURimGchb5Kwun0AgoefduM","tlshash":"0dd18d290188bd7ac738bf94601a55dc1225cbe52aa1508b9a9fe134cffaf0c56b7a44","first_seen":"2023-05-29T15:16:41Z","last_seen":"2026-04-04T16:19:49.525566Z","times_seen":5063,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":111,"dns":14,"connect":3,"send":0,"wait":18,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/easyloan","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/easyloan HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4334\r\ncontent-disposition: inline; filename=\"easyloan.webp\"\r\netag: \"0df2cfe6ae43aeca210a18cee1812b15\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 6233a31882863726d399eeaf426992d3\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-11-05T05:41:32.857Z;desc=hit,rtt;dur=2,content-info;desc=\"width=200,height=200,bytes=4334,format=\\\"webp\\\",owidth=150,oheight=150,obytes=8855,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205721,ef=(1,11,13,17,97)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0df2cfe6ae43aeca210a18cee1812b15","sha1":"e8e22fb40ae06f5b4159220f5c10ff1a82c228e7","sha256":"c5871ae5fd4d7a0d18facf2592cb0d425efbcf2ad409e8669baa0b23cf719b82","sha512":"5d9318237c957db145831d8b49259b115931e844b869beef4e3f0feef3dd8e66725fd1eefe69f2c5584c93aa84f7751a9cf6a8d03b83df328fb4d411099b7072","ssdeep":"96:r6wg8MB2Xy9FBUYe1mHMK0oSNZo6mvpl0mquAxXL+qpMqBfvpM7c7J:r6Z84fozwspoQo6mb+ueL1pnvpsc7J","tlshash":"9c918df097af46b9810034fc1e4dc1de2e849ca51113aff26e4469ac817fc2a054efe0","first_seen":"2025-06-26T04:07:01.413199Z","last_seen":"2026-04-04T16:19:49.530527Z","times_seen":1229,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":81,"dns":0,"connect":3,"send":0,"wait":12,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload//t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/logo-ola","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload//t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/logo-ola HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 10608\r\netag: \"79c49bbf1ebb397f9bdfac62c84ff457\"\r\nlast-modified: Tue, 04 Nov 2025 16:01:09 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: public, no-transform, max-age=2592000\r\nx-request-id: 9023ac6b1fd6acce7e87cb4d41623146\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-11-05T05:41:32.853Z;desc=hit,rtt;dur=7,content-info;desc=\"width=175,height=67,bytes=10608,format=\\\"png\\\",owidth=175,oheight=67,obytes=10608,crt=1762272067,ocrt=1762206152,ef=(17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 67, 8-bit/color RGBA, non-interlaced","md5":"79c49bbf1ebb397f9bdfac62c84ff457","sha1":"12b00bf60796e164f4d5b8cded5f44f400e51aec","sha256":"e774d5f44935441113829bba2ee81777c401e2d5fac92607a2b5b9965518e723","sha512":"fd16fb7442176959d5fcdc8c326a5a71955b103ef9008bbd5907171eaebd3a0447b6e531427a6d3f4504ec365606092f26e1a0df54596ed64f53efc97d4eaf20","ssdeep":"192:/ILQwmZv+f01oa2ZjuDXlkvUJYg43hBM2Qrm5mYfb4NExeM/:/ILQvBfCxjuzp/aBQr4kNEx3","tlshash":"7e22c1f694fcd8819ec64820b567a36413be54dc5d01048c8c22c6fcf20e99af7b534a","first_seen":"2023-05-07T20:58:41Z","last_seen":"2026-04-04T16:19:49.531175Z","times_seen":8836,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfgtrk5.com/RpLOR?affid=1017\u0026firstName=\u0026lastName=\u0026email=\u0026zip=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305","fqdn":"dfgtrk5.com","domain":"dfgtrk5.com","tld":"com"},"ip":{"addr":"34.102.181.184","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T05:41:30.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfgtrk5.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 17:02:06 GMT","end":"Tue, 23 Dec 2025 17:56:20 GMT"},"fingerprint":{"sha1":"76:F7:A3:47:6F:B3:B1:65:19:F0:71:93:50:0A:49:69:9E:46:AD:6B","sha256":"EC:22:59:DD:87:1C:30:0D:E4:AD:E7:83:C9:EE:A8:99:CC:D3:97:CA:3D:92:E9:32:3B:81:06:27:39:67:2D:A1"}}},"request":{"raw":"GET /RpLOR?affid=1017\u0026firstName=\u0026lastName=\u0026email=\u0026zip=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305 HTTP/1.1\r\nHost: dfgtrk5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=\r\ncontent-length: 0\r\ndate: Wed, 05 Nov 2025 05:41:31 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":50635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":256,"dns":20,"connect":12,"send":0,"wait":138,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"dfgtrk5.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-04","alert":"Phishing Block","trigger":"dfgtrk5.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"dfgtrk5.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T05:41:31.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip= HTTP/1.1\r\nHost: westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nset-cookie: Authorization=AAHYTXIT9z5VyudbEF3V_7BGneupyc7o6D2NFuWitUtXpCPhMMJ3CPZmml7rDu1Qj0s=; Max-Age=1800; Expires=Wed, 05 Nov 2025 06:11:31 GMT; Path=/; Secure\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en-US\r\ntransfer-encoding: chunked\r\ndate: Wed, 05 Nov 2025 05:41:31 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (50635), with no line terminators","md5":"ac3b09a029eab4090a86e42fb67fd257","sha1":"89a856dc54f03ef581de42cd64aef6125e0d1cfe","sha256":"f5c54a92123ebc1e348fbe4c5c3e342da4a049b9904efcdf5a69948007b0f19c","sha512":"2a22a6838dc108b01ceabffae0392fd35f824e0f84a4484779334184e3570d2da354d807e13c5faca8febd3c0abf8a13bc60ff27adf9940108c5856fc6b2c55d","ssdeep":"768:RjoOsODWJ68cFElxpUREsmv3pQVNZiNQ9vKqj:RjxlB8YElxmnmv3pQV2qj","tlshash":"db33fb86caf2cdac0c71517b3889c0629bdc2f1f48f458f1f7f94b6ae15264e90a664d","first_seen":"2025-11-05T00:49:44.206159Z","last_seen":"2025-11-05T19:19:15.435579Z","times_seen":9,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":303,"dns":32,"connect":133,"send":0,"wait":213,"receive":1,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.westwoodfinancial.net/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/runtime.5e131af6b880d1b6.js","fqdn":"assets.westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"35.244.158.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/runtime.5e131af6b880d1b6.js HTTP/1.1\r\nHost: assets.westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHHeoUwHsDte_DEhhgNh72zTxpLgG82P3TdXqapYD1hu6UiU-DiwHJd-G9unylsWqhoztbHmHU\r\nx-goog-generation: 1762206125405053\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 1748\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=Plvt/Q==, md5=Zq/D/vHM+pkLA4hF8YDlnw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 1748\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Tue, 04 Nov 2025 17:28:49 GMT\r\nexpires: Wed, 04 Nov 2026 17:28:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 03 Nov 2025 21:42:05 GMT\r\netag: \"66afc3fef1ccfa990b038845f180e59f\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 43963\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":3155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3155), with no line terminators","md5":"bef2457b4b9179e34cd96ac6be6aeaff","sha1":"c5e43aee9136f4a7c1f0494cce059bfadbdf8a03","sha256":"09c77f8c34f7a9524fdde064bf41f9c428462d76cab876fa89b761114f40589e","sha512":"ef5e7c7873da096dd629400d1dc78fc4d03fb328d3fe5af74c4de1cae1831b1bff2d3483195ed94667e298ceabade1b300c715bf5b6936ea291aec4dfa326822","ssdeep":"","tlshash":"f351e9f42224fef62ba548c06c3d94e5b5243033556bace2d71bdc16b62cde04559f71","first_seen":"2025-11-04T17:50:04.085541Z","last_seen":"2025-11-05T20:29:01.337112Z","times_seen":959,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":72,"dns":14,"connect":25,"send":0,"wait":56,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:36:57 GMT\r\nexpires: Fri, 30 Oct 2026 09:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nage: 504275\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-04-04T17:23:05.972165Z","times_seen":14209,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":67,"dns":3,"connect":7,"send":0,"wait":8,"receive":8,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/w_606,h_132,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/logo","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/w_606,h_132,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/logo HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6132\r\ncontent-disposition: inline; filename=\"logo.webp\"\r\netag: \"c4834902fa95b30306adc71d36ac142f\"\r\nlast-modified: Tue, 04 Nov 2025 16:02:35 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 08a10236c54d878ff744eb10f31fd2f1\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-11-05T05:41:32.857Z;desc=hit,rtt;dur=3,content-info;desc=\"width=606,height=132,bytes=6132,format=\\\"webp\\\",owidth=606,oheight=132,obytes=15866,oformat=\\\"png\\\",crt=1762272154,ocrt=1762205722,ef=(1,11,13,17,97)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4834902fa95b30306adc71d36ac142f","sha1":"ad639759fdf91b648a5bc9090b7d3031a3e79832","sha256":"f9109ea65bcefd992ca0c43e70f21fa0b8ac1333d7e580ad274b684f304233e9","sha512":"476775b2302db2b37a2d8ecd46a0b0a1330c61419c27e6f7d37bca1fe3394bbfb9b32b46e8034668fba2abcee4a1441d9ba422b0f37d91ae3de73d5a24419498","ssdeep":"96:DtpIeaPtEH9E1qlA8TEUp1VXi1lX8lZ13OZw2AHLLe94QPq3aIzX9iOJubuB:JpIJ+plAlyvSP0Z1D2APeKQuzXMOgSB","tlshash":"4ec19fe41e0f7a6dbc8b1ea720c174825efce8b90ae9154ce163c7f5043876620d36a6","first_seen":"2025-08-11T20:33:36.531272Z","last_seen":"2026-04-04T16:19:49.5196Z","times_seen":551,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":139,"dns":70,"connect":1,"send":0,"wait":11,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/easyloan","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/easyloan HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2246\r\ncontent-disposition: inline; filename=\"easyloan.webp\"\r\netag: \"dee5ef5cc705f72b55f476bc75a31961\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 65e679e05d4c91bf787bb573fdba402b\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.849Z;desc=hit,rtt;dur=7,content-info;desc=\"width=150,height=150,bytes=2246,format=\\\"webp\\\",owidth=150,oheight=150,obytes=8855,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205721,ef=(1,11,13,17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dee5ef5cc705f72b55f476bc75a31961","sha1":"09250ea9d72a95ecc2712ab4570ec36a0edc69e5","sha256":"de4e43058e30e20d676443ece93afa08500b5192583cbb4aa14b9d9f5a534fbc","sha512":"f7e10963137fdf3cde290abd8aa080c4def508e4a3cc9ee08fec0aaab46f7652b92c2c7494c11fa1736008068e1837f250c43ee06268033e3d69f964fd0a8323","ssdeep":"","tlshash":"a9415e6343eb40df6c45044b661f4e902a9c30d261c87efb4c40339adbde061adba332","first_seen":"2025-06-26T04:07:01.416125Z","last_seen":"2026-04-04T16:19:49.517222Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/fastApproval","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/fastApproval HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2860\r\ncontent-disposition: inline; filename=\"fastApproval.webp\"\r\netag: \"f419401ca16cfbdbc40a6f58eb30dd17\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 60d91fd4b10acd4f142ac71cddcf9c60\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.849Z;desc=hit,rtt;dur=7,content-info;desc=\"width=150,height=150,bytes=2860,format=\\\"webp\\\",owidth=150,oheight=150,obytes=9793,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205719,ef=(1,11,13,17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f419401ca16cfbdbc40a6f58eb30dd17","sha1":"f745c838a329554b116e6279db044f6b18f72f18","sha256":"02be364c0fe9806ddc66dca39ae1811ce8163d409008126ace6a9b6ba540b8ca","sha512":"f896e8f79fdf4ba67af71ef08a855b846ac3855286b0f2d20e992f681d14865c98f1e40fdb41cd9a944607dd3cb0ccbcd9dde3c62507d3f4c8d97f7a4c1df8be","ssdeep":"","tlshash":"9d514bf2f7a2e41642e5da07b46c1e5454d8b7e97b284783f2f022e437414a6c77d505","first_seen":"2025-06-26T04:07:01.409095Z","last_seen":"2026-04-04T16:19:49.51334Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:36:57 GMT\r\nexpires: Fri, 30 Oct 2026 09:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nage: 504275\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-04-04T17:23:05.972165Z","times_seen":14209,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/trustedform.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"GET /trustedform.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false\u0026field=xxTrustedFormCertUrl\u0026l=17623212923440.1555203883224643\u0026invert_field_sensitivity=false\u0026sandbox=false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19915,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":250,"dns":34,"connect":93,"send":0,"wait":93,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/fastApproval","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/fastApproval HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6278\r\ncontent-disposition: inline; filename=\"fastApproval.webp\"\r\netag: \"cbd21c875c8714e60ff7a482a2f99c8e\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 3253431706cb3f8852192cfe59515e70\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-11-05T05:41:32.857Z;desc=hit,rtt;dur=2,content-info;desc=\"width=200,height=200,bytes=6278,format=\\\"webp\\\",owidth=150,oheight=150,obytes=9793,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205719,ef=(1,11,13,17,97)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbd21c875c8714e60ff7a482a2f99c8e","sha1":"ce8fa696e7b5d77fa54e8a80bad02dcf3a524049","sha256":"e97f1794af99063833cf3ae63ea67cb92e27192b3e29f06e3e6442e348f2116b","sha512":"3c2df5ab1ca181795e5cf5ea0742961a9ea2871373d5ef6389c8cf96bff657a5e7b7c0b47551957b1930071199e8b7c85df3bee6e77e0d552490d7945b65933f","ssdeep":"96:A4nZ+9lRVfxnByvaiO0s0XCTBsymrw99fHQNjz0nxcb2g7c2tAiRtRYynze/qa:vZ+XxnByZPs0SirO9/M/0ny2quiDF6/x","tlshash":"6dd18ee4d35d2170f4bb668ae67734eae15d02481414b2edc97f4d17c729d91d640a03","first_seen":"2025-06-26T04:07:01.425223Z","last_seen":"2026-04-04T16:19:49.514865Z","times_seen":1229,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":83,"dns":0,"connect":3,"send":0,"wait":9,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/w_2000,h_1340,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/background","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/w_2000,h_1340,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments//westwoodfinancial.net/images/background HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 141156\r\ncontent-disposition: inline; filename=\"background.webp\"\r\netag: \"fa184b2fd1e893a7fbb1973e0f9173e2\"\r\nlast-modified: Tue, 04 Nov 2025 16:08:14 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 79fc248ba35648241dcb9ee3b6c740ea\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.857Z;desc=hit,rtt;dur=2,content-info;desc=\"width=2000,height=1340,bytes=141156,format=\\\"webp\\\",owidth=6010,oheight=4010,obytes=3846724,oformat=\\\"jpg\\\",crt=1762272493,ocrt=1762205719,ef=(1,11,13,17,97)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa184b2fd1e893a7fbb1973e0f9173e2","sha1":"c6d7bb4ca74e3b15d2fd7cbffdedffd4a415afae","sha256":"819b73a072fc9f52963b92c82ad52df6382c429b1b82b190e66179db47e1ab4f","sha512":"db13b7fa8e70ed22eeccfb28c235d5b2619b616a69ee67d43d73cc6c93670dd6335ef005aa2d79cfb406141c4c6910d8a1fe747db9fa6fb287b65959a74c117d","ssdeep":"3072:8KBc2JEu0hKnyEZDpnxxQo3duAZJdduxdui94u2Z:8K+pu0hKyEppxxR3Cxoi9i","tlshash":"4ed32218e9ecbe57916cd036e34e574088bf08f4cb9537e00a86319196bcf76b3999e0","first_seen":"2025-08-11T20:33:36.517971Z","last_seen":"2026-04-04T16:19:49.529222Z","times_seen":551,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z1EMQ8T80Q\u0026cx=c\u0026gtm=4e5b31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:33.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-Z1EMQ8T80Q\u0026cx=c\u0026gtm=4e5b31 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 05 Nov 2025 05:41:33 GMT\r\nexpires: Wed, 05 Nov 2025 05:41:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139055\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":411754,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"04a1a4e05674c07372d970fd2e7dd7fa","sha1":"532f2b52f704f3b177efa05fcf3b49031432e836","sha256":"d0242b9628cae39bc868b71f095bbf57dd0ddb5fef2659920de883da815ca822","sha512":"57b4e808473051b2b4e4ebab1cf3ef545960663ffc2478a6f0f514608a245b90be083f70f6f53740f8c8eb080f2d8e7fe682d23cd2c10a9faac632c73567fb41","ssdeep":"6144:UKWF4XIN1tyXRnNaBOgpmbv7dQIYh4OxPK3Q1:UBFWm2XRnNCGYhl","tlshash":"7a9409ce73c674265396e478503f018ba57b28a2f49cc899f189cce42e7069a4277f7d","first_seen":"2025-11-04T23:20:39.258353Z","last_seen":"2025-11-05T07:49:06.85835Z","times_seen":169,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:33.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 639\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 Created\r\ndate: Wed, 05 Nov 2025 05:41:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 497\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":497,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"975fb59435d262c80485a126ccceec2c","sha1":"98770a70d70917a9c04dfd1ee0fb7bedb30d44ce","sha256":"57a3306652bdcc3f7688b42cbdffbe863aa84f31e3fd273878fd900793aab4d5","sha512":"38993693a63987e5a3f388139ec92c07333f7a1b931b3e6da04670e6dbe6edaf8b2585cbe4fbc95076cbe9b7beef637e58fdee35e2250f7200b5b590d1cf44f4","ssdeep":"","tlshash":"2cf0051b1b9c1d70166d36574d087937c7093a741cce5acc9342df13940d8551b3c957","first_seen":"2025-11-05T05:41:59.259526Z","last_seen":"2025-11-05T05:41:59.259526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":192,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/f64fa1da581733b2747bf1b89649dc55579a57b7/fingerprints","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"44.208.125.29","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:34.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/f64fa1da581733b2747bf1b89649dc55579a57b7/fingerprints HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 176\r\nOrigin: https://westwoodfinancial.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 05 Nov 2025 05:41:34 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"engage.freshmarketadvantage.com/aff_c?offer_id=305\u0026aff_id=9\u0026aff_sub=S3G1\u0026aff_sub2=slester@flyrichmond.com\u0026aff_sub3=[SOURCEID]\u0026aff_sub4=betterthanworse\u0026aff_sub5=flyrichmond.com\u0026resid=[RESID]\u0026email=slester@flyrichmond.com","fqdn":"engage.freshmarketadvantage.com","domain":"freshmarketadvantage.com","tld":"com"},"ip":{"addr":"99.81.210.173","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T05:41:30.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"engage.freshmarketadvantage.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:88:1D:5A:2E:A2:B9:FE:13:25:74:3E:DE:58:5E:39:02:34:96:4F","sha256":"60:FE:B7:0F:E9:7F:62:28:34:84:15:3E:5D:28:2E:B4:DB:9A:D5:1B:E5:4A:14:02:22:60:44:B6:F4:A7:A4:C0"}}},"request":{"raw":"GET /aff_c?offer_id=305\u0026aff_id=9\u0026aff_sub=S3G1\u0026aff_sub2=slester@flyrichmond.com\u0026aff_sub3=[SOURCEID]\u0026aff_sub4=betterthanworse\u0026aff_sub5=flyrichmond.com\u0026resid=[RESID]\u0026email=slester@flyrichmond.com HTTP/1.1\r\nHost: engage.freshmarketadvantage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 05 Nov 2025 05:41:30 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 327\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nLocation: https://dfgtrk5.com/RpLOR?affid=1017\u0026firstName=\u0026lastName=\u0026email=\u0026zip=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\r\nP3p: CP=\"NOI CUR OUR NOR INT\"\r\nPragma: no-cache\r\nSet-Cookie: enc_aff_session_305=ENC033f542102534bc58c484a6fd26b4b1e8c277aec7b33d71b01bf66ca2a3b17731bd3498a828d69a6875442e610a6f9f8330ef55ea1d97b81c3aacca24f6eaa6fcefbac19cff10b3d27721d1f5b5c6c166de5a4c7720c493d5abc227a503578569ae149f086d16bec4d741206d630c68cb443cd57b68815407c8aaf1102d7842e5a8efaaaeb19d184d7623298bf863636ef04d44b8213cf06a37f930b08d9aab2f41f8e59f8658d800901b1317a962d2bbb42efe049b661451d92d0b60e1d91091a0c982381; expires=Fri, 05 Dec 2025 05:41:30 GMT; path=/; SameSite=None; Secure\nho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMzQuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Fri, 29 Sep 2028 16:21:30 GMT; path=/; SameSite=None; Secure\r\nTracking_id: 102e996efa5c74cbfa5d02c82168ef\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Tune-SDK-Version\r\nAccept-Ch: Sec-Ch-Dpr, Dpr, Sec-Ch-Ua-Model\r\nX-Request-Id: 4336a60b9206d994d0593c6c9319d5bd\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":131,"dns":32,"connect":34,"send":0,"wait":38,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"westwoodfinancial.net/favicon.ico","fqdn":"westwoodfinancial.net","domain":"westwoodfinancial.net","tld":"net"},"ip":{"addr":"34.121.35.39","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:33.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"westwoodfinancial.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 13:40:06 GMT","end":"Mon, 05 Jan 2026 13:40:05 GMT"},"fingerprint":{"sha1":"BE:48:B2:87:0B:EA:D6:8F:06:4A:92:E6:DB:38:59:00:0C:34:2A:A5","sha256":"16:4C:32:8D:C8:FD:C6:CE:17:19:65:C0:75:AE:96:94:AA:A8:D2:F9:91:81:3E:57:E3:B9:BA:C9:4A:7D:8D:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: westwoodfinancial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=\r\nCookie: Authorization=AAHYTXIT9z5VyudbEF3V_7BGneupyc7o6D2NFuWitUtXpCPhMMJ3CPZmml7rDu1Qj0s=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ntransfer-encoding: chunked\r\ndate: Wed, 05 Nov 2025 05:41:33 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":121,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"858d302d02299db6d22a597b25f7fbde","sha1":"114b8443f8c8e0b1c5e5b7c082a14403c6371604","sha256":"d1bc565b771f6eafbe1709e58a9382bc9c70c20f50a6605ccc2278883376aa66","sha512":"77d9753add1f260d954c064757f237d750591126020abd915062acb5cd6125a5592f3d78365bb0d11daff5ec8bdae6668302a01a97c1d3e68a1c8391e8933501","ssdeep":"","tlshash":"9bb09b144d4d48152dc1c01514a951506e438fc71755255256cb4728462c46f94f9c5d","first_seen":"2025-11-05T05:41:59.260248Z","last_seen":"2025-11-05T05:41:59.260248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/seal-ola","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/shared/defaultImages/seal-ola HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6216\r\ncontent-disposition: inline; filename=\"seal-ola.webp\"\r\netag: \"2b7deec9097a2ce2e324b836e7c06d90\"\r\nlast-modified: Tue, 04 Nov 2025 16:01:00 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: b6e4a71a1d50b0168a68ffd7463ff653\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.849Z;desc=hit,rtt;dur=7,content-info;desc=\"width=125,height=125,bytes=6216,format=\\\"webp\\\",owidth=125,oheight=125,obytes=33464,oformat=\\\"png\\\",crt=1762272059,ocrt=1762206155,ef=(1,11,13,17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b7deec9097a2ce2e324b836e7c06d90","sha1":"4ed7c7ad6b60d1561e6eb998161eb45b47201539","sha256":"d2d1aff262fa609da293127959bdb5bb415cbaa722165b612ab53a13e44d8812","sha512":"b31ccf8f80309f93392148003cd8de0e3dd527db58843663bbbdd04f1fc117f35593a31b38f3ab52fdb31526d9692e043aab769f76d4f9117c09b2f8168f9c6a","ssdeep":"96:ud0agf7GdIDlKcFEB6SSbRNwt/G383al42upfsy6fHx5AUi2/FT25d7JaIsYUi6Q:KgfxFFW5SbRNU/MuHsy6fYUI5DaIsncr","tlshash":"5dd1aeba803294560e3ee97d97ca6d1f0330c1ebc5e211a70f94ceaaa230e25d791395","first_seen":"2023-05-07T20:58:41Z","last_seen":"2026-04-04T16:19:49.519035Z","times_seen":8836,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":129,"dns":65,"connect":3,"send":0,"wait":11,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/cash","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:32.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /dbtcg826q/image/upload/w_200,h_200,q_auto,f_auto/t7/40f47d85-657f-4cb9-800b-540ce97eabd1/dist/dynamic/environments/westwoodfinancial.net/images/cash HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 7384\r\ncontent-disposition: inline; filename=\"cash.webp\"\r\netag: \"f8695f96a809d3c1e81b5ed54ac6b62c\"\r\nlast-modified: Tue, 04 Nov 2025 16:06:12 GMT\r\ndate: Wed, 05 Nov 2025 05:41:32 GMT\r\ncache-control: private, no-transform, max-age=2592000\r\nx-request-id: 11dd9af58e1e0021efc1f36f377e6504\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-11-05T05:41:32.851Z;desc=hit,rtt;dur=7,content-info;desc=\"width=200,height=200,bytes=7384,format=\\\"webp\\\",owidth=150,oheight=150,obytes=13692,oformat=\\\"png\\\",crt=1762272371,ocrt=1762205721,ef=(1,11,13,17,97)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8695f96a809d3c1e81b5ed54ac6b62c","sha1":"d666e20c1da845965812747e081bdf7e5272acab","sha256":"b86e0eca0f393e5f310a87f9e6f4a818fd5ad54c3615ea25aa1e9b814313fd9c","sha512":"547489bfe9165f66b45d153879b4d620d02c8392ecc5bb59dbcde5832969241e5159f0c2c473f2fcc3a835bb98e0330e0d25709c4d7566509b1afe59855df9a1","ssdeep":"192:snaUW26u26FqCT/mwEdk0hOBNz4T33QKRZyCx3:b3O3TOr7MBNzdxCt","tlshash":"4be1af47629556dff401814292523bba77fac8b2cf8022373feba10a5d051bf97ad4d0","first_seen":"2025-06-26T04:07:01.407728Z","last_seen":"2026-04-04T16:19:49.528349Z","times_seen":1229,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SCVH02FKWL\u0026cx=c\u0026gtm=4e5b31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://westwoodfinancial.net/?affid=1017\u0026cid=1163\u0026email=\u0026firstName=\u0026lastName=\u0026s1=9\u0026s2=102e996efa5c74cbfa5d02c82168ef\u0026s3=305\u0026zip=","date":"2025-11-05T05:41:33.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-SCVH02FKWL\u0026cx=c\u0026gtm=4e5b31 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://westwoodfinancial.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 05 Nov 2025 05:41:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1608\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}