WEBSITE ANALYSIS REPORT

http://fosterbailbonds.com

21 Oct 2026 · 23:16:24.000 UTCpublic

Report tags: malicious clickfix
Submit tags

Request review

Malicious detection

25 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

1rpc.io6 captured requests
cdn.jotfor.ms32 captured requests
cdnjs.cloudflare.com1 captured requests
events.jotform.com2 captured requests
fonts.googleapis.com3 captured requests
fonts.gstatic.com9 captured requests
form.jotform.com4 captured requests
fosterbailbonds.com148 captured requests
franfrbar.com16 captured requests
gabailbonding.com1 captured requests
istile-c-cloud.beer1 captured requests
jscdncloude.beer3 captured requests
karmazarbaza.com2 captured requests
lovezramexar.info1 captured requests
makeverizyjar.info1 captured requests
ohhhhhmoney.com4 captured requests
polygon-mainnet.public.blastapi.io1 captured requests
rpc-mainnet.matic.quiknode.pro2 captured requests
widgets.jotform.io1 captured requests
www.googletagmanager.com1 captured requests

Connections

form.jotform.com → cdn.jotfor.msLoads from32 captured connections
form.jotform.com → events.jotform.comLoads from2 captured connections
form.jotform.com → widgets.jotform.ioLoads from1 captured connections
fosterbailbonds.com → 1rpc.ioCalls6 captured connections
fosterbailbonds.com → fonts.googleapis.comLoads from2 captured connections
fosterbailbonds.com → fonts.gstatic.comLoads from8 captured connections
fosterbailbonds.com → form.jotform.comEmbeds2 captured connections
fosterbailbonds.com → form.jotform.comLoads from2 captured connections
fosterbailbonds.com → franfrbar.comCalls1 captured connections
fosterbailbonds.com → franfrbar.comEmbeds1 captured connections
fosterbailbonds.com → franfrbar.comLoads from3 captured connections
fosterbailbonds.com → gabailbonding.comLoads from1 captured connections
fosterbailbonds.com → istile-c-cloud.beerCalls1 captured connections
fosterbailbonds.com → jscdncloude.beerCalls2 captured connections
fosterbailbonds.com → jscdncloude.beerLoads from1 captured connections
fosterbailbonds.com → karmazarbaza.comLoads from2 captured connections
fosterbailbonds.com → lovezramexar.infoLoads from1 captured connections
fosterbailbonds.com → makeverizyjar.infoLoads from1 captured connections
fosterbailbonds.com → ohhhhhmoney.comLoads from4 captured connections
fosterbailbonds.com → polygon-mainnet.public.blastapi.ioCalls1 captured connections
fosterbailbonds.com → rpc-mainnet.matic.quiknode.proCalls2 captured connections
fosterbailbonds.com → www.googletagmanager.comLoads from1 captured connections
franfrbar.com → cdnjs.cloudflare.comLoads from1 captured connections
franfrbar.com → fonts.googleapis.comLoads from1 captured connections
franfrbar.com → fonts.gstatic.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:15:27.227 GET 200 document 208.0 KB 3219 ms 2 alerts

23:15:30.731 GET 200 stylesheet 44.4 KB 55 ms 1 alerts

23:15:30.734 GET 200 stylesheet 21.3 KB 61 ms 1 alerts

23:15:30.736 GET 200 stylesheet 59.8 KB 62 ms 1 alerts

23:15:30.738 GET 200 stylesheet 11.0 KB 69 ms 1 alerts

23:15:30.741 GET 200 stylesheet 4.1 KB 66 ms 1 alerts

23:15:30.743 GET 200 stylesheet 615 B 64 ms 1 alerts

23:15:30.745 GET 200 stylesheet 30.3 KB 70 ms 1 alerts

Transaction #87

Request / response

URL

GET HTTPS

https://fosterbailbonds.com/wp-content/themes/bridge/css/font-awesome/css/font-awesome.min.css?ver=7.1.3

IP / ASN

141.193.213.10

AS209242 · Cloudflare London, LLC

Requested by: https://fosterbailbonds.com/

Resource information

File type: ASCII text, with very long lines (30889)
MIME type: text/css
First seen (UTC): 07 Apr 2023 · 05:23:40.000 UTC
Last seen (UTC): 21 Oct 2026 · 23:16:57.508 UTC
Times seen: 3364

Size: 30.3 KB (31051 bytes)
MD5: 31fcabb7527387d1c023306eb427650d
SHA1: cb25eeda89ae011f60376db4b44a08b764bc13d7
SHA256: 750448d2d9a953729318615f004a46ae1b8e8d9833df41f63e4ded8c8ff7e105

Certificate information

Issuer: Let's Encrypt · YE1
Subject: fosterbailbonds.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C0:72:11:D3:6B:12:91:66:32:F2:96:A1:B7:4F:BC:20:30:40:71:D7
Valid from: Mon, 24 Aug 2026 01:56:16 GMT
Valid until: Sun, 22 Nov 2026 01:56:15 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /wp-content/themes/bridge/css/font-awesome/css/font-awesome.min.css?ver=7.1.3 HTTP/1.1
Host: fosterbailbonds.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://fosterbailbonds.com/
Cookie: __cf_bm=9AvvFYKsiIbLpEqbnRaCqYAm2aypXlGnc9bEfTlcUwk-1792624530.4334261-1.0.1.1-zKQijbvtrVeqfLG6RQKk7V8OSt53lMSSiElps_a8CQj2_dsw2njnuKd4gOK6VfkCpuvjCpiIw06dB7YnI9DHvs3wmYbxfHJAWT62o82wMHQWNw.QH1FWCRJjyOVty1Sc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Wed, 21 Oct 2026 23:15:30 GMT
content-type: text/css
server: cloudflare
priority: u=2,i=?0
last-modified: Wed, 01 Mar 2023 22:53:13 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63ffd759-794b"
age: 1108011
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
cf-ray: a4e3f6f52d1f56af-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

23:15:30.747 GET 200 stylesheet 21.3 KB 55 ms 1 alerts

23:15:30.750 GET 200 stylesheet 76.2 KB 47 ms 1 alerts

23:15:30.753 GET 200 stylesheet 11.3 KB 50 ms 1 alerts

23:15:30.755 GET 200 stylesheet 19.2 KB 71 ms 1 alerts

23:15:30.756 GET 200 stylesheet 61.2 KB 57 ms 1 alerts

23:15:30.758 GET 200 stylesheet 787.8 KB 50 ms 1 alerts

23:15:30.759 GET 200 stylesheet 611 B 61 ms 1 alerts

23:15:30.761 GET 200 stylesheet 13.1 KB 79 ms 1 alerts

23:15:30.764 GET 200 stylesheet 142.7 KB 166 ms 1 alerts

23:15:30.765 GET 200 stylesheet 703 B 54 ms 1 alerts

23:15:30.767 GET 200 stylesheet 474.0 KB 59 ms 1 alerts

23:15:30.771 GET 200 stylesheet 73.6 KB 107 ms —

23:15:30.772 GET 200 stylesheet 19.7 KB 75 ms 1 alerts

23:15:30.774 GET 200 stylesheet 18.9 KB 57 ms 1 alerts

23:15:30.776 GET 200 stylesheet 85.3 KB 43 ms 1 alerts

23:15:30.778 GET 200 stylesheet 16.1 KB 63 ms 1 alerts

23:15:30.779 GET 200 stylesheet 1.1 KB 50 ms 1 alerts

23:15:30.781 GET 200 stylesheet 9.3 KB 67 ms 1 alerts

23:15:30.783 GET 200 stylesheet 31.3 KB 47 ms 1 alerts

23:15:30.785 GET 200 stylesheet 145.6 KB 163 ms —

23:15:30.786 GET 200 script 85.5 KB 61 ms 1 alerts

23:15:30.789 GET 200 script 13.3 KB 62 ms 1 alerts

23:15:30.790 GET 200 script 120.1 KB 70 ms 1 alerts

23:15:30.791 GET 200 script 126.0 KB 51 ms 1 alerts

23:15:30.792 GET 200 script 21.3 KB 58 ms 1 alerts

23:15:30.793 GET 200 script 121.1 KB 70 ms 1 alerts

23:15:30.795 GET 200 script 347.0 KB 74 ms 1 alerts

23:15:30.796 GET 200 script 460.0 KB 167 ms —

23:15:30.798 GET 200 stylesheet 18.0 KB 72 ms 1 alerts

23:15:30.799 GET 200 script 18.8 KB 218 ms —

23:15:30.806 GET 200 script 18.7 KB 441 ms —

23:15:30.808 GET 200 script 1.4 KB 177 ms 1 alerts

23:15:30.811 GET 200 script 18.2 KB 59 ms 1 alerts

23:15:30.812 GET 200 script 8.5 KB 57 ms 1 alerts

23:15:30.819 GET 200 script 9.9 KB 56 ms 1 alerts

23:15:30.820 GET 200 script 881 B 169 ms 1 alerts

23:15:30.822 GET 200 script 5.0 KB 69 ms 1 alerts

23:15:30.823 GET 200 script 5.7 KB 71 ms 1 alerts

23:15:30.825 GET 200 script 2.6 KB 156 ms 1 alerts

23:15:30.826 GET 200 script 8.1 KB 53 ms 1 alerts

23:15:30.828 GET 200 script 4.3 KB 55 ms 1 alerts

23:15:30.834 GET 200 script 4.2 KB 186 ms 1 alerts

http://fosterbailbonds.com

Domain graph

Hostnames

Connections

Network requests

Transaction #87

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fosterbailbonds.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #87

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://fosterbailbonds.com

Domain graph

Network requests