{"report_id":"103ff800-bd0f-4143-9dcc-a8d8bff84352","version":0,"status":"done","tags":[],"date":"2026-09-20T20:38:46Z","url":{"schema":"http","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"title":"Extrem Global Ventures Logistic, Delivery and Transportation","dom":{"size":41768,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26410)","md5":"f226b094f8e651e8f23ae65c25098979","sha1":"198dd7631ddf075487d37d8c3e31f804b3d5e531","sha256":"075c190a7761ab6ea907fa2bd418f49c0ff5379d67cc9b73786c994deaf14c40","sha512":"10a13e7174874733f29d9f3db6cb22279376531ed5d3f29baa2e6de2ac0ffed662b2d2dcffd458824b098ad8e22f7a4c615b51d3ab959a48b4f3332f0d185935","ssdeep":"768:4yJi2qbCmmWqo8FTbfsTO+hDGqRt8UtN2v3k/SR+D/5km5o:xJzqbCmmWqo8FTbfsTO+hDZRt8UtAk/u","tlshash":"6413a7176784452c9c53d278f399b54ea32af688ef6269eef7c23410c2d93ff088a455","dom_hash":"domhasha09e2b964037d2360f8d1ddedad10bc0","first_seen":"2026-09-20T20:38:52.457372Z","last_seen":"2026-09-20T20:39:11.739006Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T20:38:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.getbutton.io","ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-09-14T09:04:50.189633Z","alert_count":0,"request_count":2,"received_data":443364,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.186.192.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-19T00:44:36.498741Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-19T05:07:09.834381Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":639,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":5,"received_data":128240,"sent_data":2815,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":12756,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-19T00:44:38.330945Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-19T00:44:36.838476Z","alert_count":0,"request_count":4,"received_data":378711,"sent_data":1915,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"extremglobalventures.com","ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-12","domain_rank":0,"first_seen":"2026-09-20T20:38:42.180621Z","last_seen":"2026-09-20T20:38:42.180621Z","alert_count":97,"request_count":97,"received_data":5007168,"sent_data":121511,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-09-19T15:06:50.427871Z","alert_count":0,"request_count":2,"received_data":1080,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-19T00:44:37.773955Z","alert_count":0,"request_count":1,"received_data":18555,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/popper.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ba39ec9e010ade7661f4cf418ccf4cf","sha1":"04c6c2638dfdfce2fe7fa7acfc9294f21e067b1d","sha256":"a218b23f23e8fe9cbf4b810716f15ba06634b87a19ef1427197c1c3e1f89b33c","sha512":"d5dec489080ad83a76bae36b113d8e7cc00c6fc08a57d51c99a8b224a2f76a2a6e2af256d40e82d138282bed3515728bf44bd651f4bffa1beabf1279a5bad63a","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4s:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy8G","tlshash":"f982c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","size":18593,"data":"","first_seen":"2023-03-12T15:58:50Z","last_seen":"2026-09-20T20:39:11.752354Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e896609a9dcda2308e1e9dd0e95d38cc","sha1":"bcd509339309cad5c921860069b095321e38071d","sha256":"c635d40308367a226983ba271f569bf14e65c8be6b3a25ff0f61b8bac60d71d3","sha512":"8c0478e90895afc14e5dc5ca44c9e64bcfe000602def9ea053604423551c82bdd4f5446573ce828b02aa58ae791935f08e748a516f4bdce6f55c0d3cf69941f4","ssdeep":"","tlshash":"507132d220166c5e4ca3a39295ef17c663f1ed2835039c1c9772b5806eccd1d29bbb9d","size":3750,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.749242Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf209292b3d2e9c16de6fdecd4bd77f","sha1":"c0849053ea2399b75ade5d2be6f1baaee7f3e5e1","sha256":"2b4488725ceb13f3bb8ed8461c8d2bcd6e463a0321e9bcee9903a966182d515e","sha512":"11f68485a12034c1ebf43e9e0a6fe1aaecb14ff61d58bb37979cd4559a99e9465a200c283980166a1d31634899e604010772aa4c765deac68e8e733a54d03eb2","ssdeep":"1536:tWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:tWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"2943fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","size":55805,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.827788Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/gsap.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dad1a81f3ad4813313c0a3340da637b","sha1":"2033e4cc6c454aeab08cc8d0f8eda14a0320e441","sha256":"c101cf4a7ec903b931112ceaf3f813488692a8096dc5616a1adb0ab022576e4e","sha512":"ffe6aa08b877738def01cb7083054c125d5c234fcb200d52b55b0d12e85588bfb035e9b7dc0c01122d3e27ffa490544c2ba6a0c79d7d1890b95b6110ed98c860","ssdeep":"768:RIY2Di3rHJCGE7FbHiVLdA1Q+AbnDbhWt0L/qwLELyL/t11FoKoT/YQXaHwnrcRO:Rh2W3rCi3aC7BWGmxc/tIpQuf","tlshash":"3143f8cc3292f42643975165447f0a0bb337a998640f0518f269e5cd7e3c9aa42bff7a","size":60532,"data":"","first_seen":"2023-03-14T10:19:42Z","last_seen":"2026-09-20T20:39:11.757219Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/odometer.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cc5a91ec99e51f3c2d5dfd52cd5a711","sha1":"855628980708cae2ce7e7173bc130e3c24f11863","sha256":"6560e1e62dd42383fca13f500d9ac9dd479915069e2e7234822113825fb8e847","sha512":"964b34d8941b6e7c95e527d533eca88b5ac7523f56bc86697460a544a8fa015710c2a34f3033d0749ff6068b0ffe25e69b6dce1bf610f4f454062cd7d1ea4d3b","ssdeep":"192:5ABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:SBhv18QecCxVxz+7dlT","tlshash":"b1229680ba11a735835371e151bf060ab7bb99bea404401df67c9dd9be29c38e12bf74","size":10260,"data":"","first_seen":"2024-02-29T22:11:53Z","last_seen":"2026-09-20T20:39:11.814176Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c408abeb4d361212429635b4b519b64","sha1":"39469d335fe140483a83eb62551b703dd449a6c1","sha256":"50babb9481295e182b05c23d183309df0ec0de16275b443be86875ce520e1b2c","sha512":"1cdeb8e3d662ce3e6294174ee97a1c107ded37a90585f699fc011c0cdec9567e04315f9d82b26b1b144ba151a24b798dd7e5aa27c3c7e2e26c2e805aef05e824","ssdeep":"192:xpN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:WqIypeQsZWqf9","tlshash":"11f1728460143caf0652b389966680f963fc294c672bd8647cff7165085cacd027feee","size":7601,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.766693Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/wow.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-09-20T20:39:11.825004Z","times_seen":4145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/splitType.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff97bd0220097f25268b128681f48ab4","sha1":"29812a88964104209eacae5a0dd098e816b3f615","sha256":"b967d75177da82a3bf7d3b6fb6a88f3883dbabed0cca94fb9a7f3a7e92412fb3","sha512":"77ea828b0b8f937a31c9ad0cddcff88cd930782c44379b5d5016d3246253eca82f092ffe491f2de32d1e7888b86467504371852a1572be1ce324023b78e28ec4","ssdeep":"192:+A2isE6gQC8yqLpzHMIWzpx9m9irRdtGvGH/xoYA9RrCdp3WApsw0s2U9URmg9y2:+Us3gvwzHxGWkavGZoTRrwfs9UGRmgY2","tlshash":"6d02b6857227f56056991469e0fb131af2341036711b91a4f4bdecfa7824cea23b2fe9","size":8382,"data":"","first_seen":"2024-09-07T13:45:05Z","last_seen":"2026-09-20T20:39:11.767616Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/select2.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86fee17cd48a321dbb33df5c823a3d95","sha1":"c51a8d16981e09b1e1fadb7fe4fd9564a8d96dc2","sha256":"c8467b98f112bb1b06a33cde66a70de85c05d22a455f91f592554c804a50a729","sha512":"bf4b0087cda491025408c4aea6910f55deb3719e9076d16d75394a7b547d401653a2a827458ab0e9bcf913b7166c712c54508cfd617f38f490516f6b27342097","ssdeep":"768:noeWucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOw7uZRgydn/RcSf2bK/Jw:18hC3jIG+kOvebyJJ1CD","tlshash":"5663c74c7a537234426f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","size":70891,"data":"","first_seen":"2023-03-07T12:57:41Z","last_seen":"2026-09-20T20:39:11.831951Z","times_seen":4387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e0daef44ed6ad5559d6c29c0e413e0a","sha1":"ea8c0943a23a87528e394115ea20d3ae0d3e8c14","sha256":"fe1591e3534594f770789ebbf62b4d8657f735f87f8576fe8dca2d807b4d7079","sha512":"c5ea53743f997c9f568c10db81fd0a46a303bdeadd069a7451a70b4e12fd81e2316c7f04ffbdef0bacfcb809005cbbe87d6d3c7f63602a8d200858f51f009def","ssdeep":"384:XhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:XIObR3zXpcN12H2DqZ9iA9QE","tlshash":"dfc2a8a9769038ab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","size":26099,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.770779Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f55a45f6fa3d90089cd37988b744e43","sha1":"c7c799481be4517f8b39dba57fe88aaa325df909","sha256":"528240420dedd03c508141f501169017954b9724ca8334ccf96582ecdad4f5e2","sha512":"c14ecff64a998b11b80940227040c04a2040f95871b6d2a919018f86a60ccc2c1438fdd81b1e23192b31382f270a72a481057a1d3d79a194eb267209a72eb23d","ssdeep":"384:u1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:tpwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"1ad2e8dfea264c6280432142d3f589162219c977fe326fda37e9d0b505d305e22fbd9a","size":29066,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.753221Z","times_seen":527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-20T22:48:36.480133Z","times_seen":758293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e0daef44ed6ad5559d6c29c0e413e0a","sha1":"ea8c0943a23a87528e394115ea20d3ae0d3e8c14","sha256":"fe1591e3534594f770789ebbf62b4d8657f735f87f8576fe8dca2d807b4d7079","sha512":"c5ea53743f997c9f568c10db81fd0a46a303bdeadd069a7451a70b4e12fd81e2316c7f04ffbdef0bacfcb809005cbbe87d6d3c7f63602a8d200858f51f009def","ssdeep":"384:XhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:XIObR3zXpcN12H2DqZ9iA9QE","tlshash":"dfc2a8a9769038ab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","size":26099,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.770779Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06a23d419ce283a4afff5d3dd510a1b8","sha1":"42e1489f5708d7512b0a6eced2bef264b530e465","sha256":"16f812a25b351e209e92b5004bc6513146566eee8d88c73d7bf81ef4451aa9f6","sha512":"4ad03403e5a90a52e3af25235654ed81477b8401e1ec8a95892f4efaf3026119ef5e14aac1a6e48a7cfdec5861101285ad2346a5554efc973dd64087dabd9172","ssdeep":"384:sSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:pkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"c0c2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","size":26075,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.831065Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/bootstrap.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","size":60089,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-09-20T20:39:11.759546Z","times_seen":6664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"639bf8fb5c0127ce1778c759df1a4b14","sha1":"12450c295f8a802337bf9392e69b26b511652848","sha256":"8627bed017111ee3bd56feb3f7a4313100bd0289affd59c6e5902283c6ac58fb","sha512":"165af76b2c78235ccb85591527047d4f76386732df79a8461abb98613efe5d1f12c6b192f73bb58ac45432b7319600d4205d23969187b7a5b23f6af3ab1850e9","ssdeep":"","tlshash":"1de0f17d3c344094479211f4c0bbf6383d1b30204044e91784968c791cf0fcdbd01998","size":416,"data":"","first_seen":"2026-09-20T20:38:52.587565Z","last_seen":"2026-09-20T20:39:11.848541Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f7d70ccf1664861e4b249be7aedac3","sha1":"a167aa80b5fff7d3899f88cbb78acf0c5b6c93c3","sha256":"89829d40cc5d1eb8640da10b46f5a427592d59cf3850bf73471b775a41b5ad69","sha512":"50a287383143cac76f63b35c9ba9daeee4b6c05512f2f7953ec23d536127f9af1e9d818ee0ebf45a3be6c5d08be285667061089cb3f2d5065b88d47c1e7458c3","ssdeep":"","tlshash":"6a01fe8c9d067636250b71e5213f900035b440198815e418b80ec6905fa1e946c0bdee","size":694,"data":"","first_seen":"2026-06-22T17:11:22.402029Z","last_seen":"2026-09-20T20:39:11.84933Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"feb4e61508f5ed2003ff10a83bf2f7f4","sha1":"0b8db67cf523658e69a16f0e7c0790094424095c","sha256":"71b94e8a0072eb4fcf4c9bd085c4dea60c65f5476beb19b37295462a2469c5e3","sha512":"fe9e4ed4d867fc596f4e4deec0ec8cc63186af3dbfeba6bbd1a591c18df924c09ac43fd52e24e9652b0bcf32cdb4758d1161c6e904a136e6b20b6b05eaa7eb8e","ssdeep":"1536:wjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvu:wdeIygP3fulzcsz8jlvaDioQ47GKf","tlshash":"0a93f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89660,"data":"","first_seen":"2023-03-13T15:40:12Z","last_seen":"2026-09-20T20:39:11.798629Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cb7f05bc14594ea34596fd87f77b77e","sha1":"aa01890babe2fc27e69bf67efa4891badc611c0d","sha256":"a0ad9ea15f682280df7d61d146435e6954f235f0bf9e4a783d0eeb65d1ed8400","sha512":"f5c8ac1dd96b1179d610094393c646817440a5607590190e90f0c2212b0bd2c91e2a154f0115744cc955984ab8ad226cb999162e5543f8e2bf46680e8369b0d5","ssdeep":"192:WQwK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:P1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"4332d95a6e2028b640f3132cf99d45d273228572e5068d41f9e6f9b5566ce9c037abcc","size":10927,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.795134Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/main-slider-script.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b21e3505a325a709594969365f0946","sha1":"80f01a601b877ebdac03a83e2d0ee3054049ce28","sha256":"029592820bfbb39b58a6543d48b9ccd131484ffa602d4ce3d6a841d6d94d5422","sha512":"b774f981654d3d019516727a249f540f89f725888e61c1f46ddda85d83bf905803d42a3de6c4ebe6d0d5c707f6a1e4990027750bdaddb61fd227947ce991e7ae","ssdeep":"","tlshash":"ae2163225111d8ab4a73532a53050d04e7f25c26be237960e198137a9c52b9a578f3ce","size":1359,"data":"","first_seen":"2024-10-04T11:12:03.441297Z","last_seen":"2026-09-20T20:39:11.836907Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-20T20:39:11.829119Z","times_seen":3147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery-ui.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5985b55bef54c76cd240b87bc192ec0c","sha1":"84ca3f631b00fefece523a682e5341dd75ad886c","sha256":"1ba5287a919753a8fdb18929f1e3e7f6ccc31154169d254872080d11a9b1c4ee","sha512":"55b074665b0360dd7dcb8147e3510f7e8599f5d56a9b97ac9be9ba22536829e6b123fa145678f53b5b48948aa49aabef6ce8bf53c3d7a05d9f2e9e0c9c09ba7d","ssdeep":"6144:cjdtixAcT6eudN/CNTfq0226eAoC1mBeBnBNHLCQ/2I:c/i/LmRCNTjeBnBNHL92I","tlshash":"4564f90d7300363a89efe26e146b674e723691999501406cf4788dcd6bbde01a1bbfbd","size":335262,"data":"","first_seen":"2023-03-07T15:34:48Z","last_seen":"2026-09-20T20:39:11.746905Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/ScrollTrigger.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dba3a52d5026176acf0ec7b8ea3eba6","sha1":"88c2055ca55b52830964a8680bcbd40e46f713b4","sha256":"0dbc27f62d87e11d968089fb99a391c3c77a3e4b63ec1f765e0295c9e43807b2","sha512":"714e21c2c522a17309d6b080722f360111cc9edcb25ed351f15788283c9795b7a95f26463623b3b1adedd9ba01b9c3e46495f7b4feabdb1fe4b7e7e4518adc64","ssdeep":"384:dSAHRd3dYuIUvLVfxq4YT7HAYxwvYf+CgdKQbAmyaEN:dSEtvLVKUvu+NwMO","tlshash":"337217ce7245b062279f6235a45f410a733a009c6a0f0664f364e8e47db92bd932ff9d","size":16145,"data":"","first_seen":"2024-09-07T13:45:05Z","last_seen":"2026-09-20T20:39:11.749841Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/owl.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1febf37f7caae0f4dfdcb8a566eb84ec","sha1":"55b6c4d4f0e89d06c4cde3c5eeed3f5ed1e2bc50","sha256":"ffd9dc420f8465f1b39a34507f45aab5251c2fcf879ed61ad25e7aa6afe874b2","sha512":"12809f14edfeec7fe3a528eba6945eccfc1ac2498649d4ba275192c6a36b7d9e7a054853b2ed48aeafa45dd1877faa7fdf0a7ed5e752054cbf6576f6dbd0f3bc","ssdeep":"768:nAzJAMo9RyOpwUHLuudvayiRvaDpHcSY3U88hc5m:nAKMo93wUHLuuxWaDp8bH8hH","tlshash":"3933a605b320192d43dba271667f1306733b950cd810616dbd74aaddaea9809a13fffd","size":52300,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-09-20T20:39:11.825656Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/script.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"165c3147e10d9f9aec2fc4e03acc9a39","sha1":"674bf57fdc4a43a2733b173a16f4a6d1ff9217b1","sha256":"ea8841daba93bb64420abf4c8c11c273c6b487720c0a32daecd1f900e5f22344","sha512":"fa51a475d85726b69b6a10b898e79252989d441956d5c1e996f45288b847e76bc1e420e0057551f67b9b3c7ec9318186220bc23c31c1bbce8c29d499996cc860","ssdeep":"192:/M7z9IKvr/zkLEeGvSlK1uwcUgjb5KF/gGUbvf87Qykk3wCk:ZE/uwZPQy+","tlshash":"ee32b905f32034b680ff727ad50b9b41bbb6599ac2819101f0f6443d1fe598ab5bbb1e","size":11267,"data":"","first_seen":"2024-10-04T11:12:03.478118Z","last_seen":"2026-09-20T20:39:11.810816Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T21:03:16.918382Z","times_seen":9543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/appear.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","size":1552,"data":"","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-09-20T20:39:11.817043Z","times_seen":2848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c8ab83121aea69abda4bebcdb56cce","sha1":"ce5e643bdf3c21429faae3517d86b5948d073ed0","sha256":"b0ea84434d935db0db78525789729bf90ba04ab5a1c279379fce0b7773ea2c96","sha512":"a30a5095f0ad8f72a7921dfeff3e79ae50590cbdc207bbb213bc60bc000c0d4298383d30413090078ba70cfdbc89e97d984cc516be64f3471712b040d08ea986","ssdeep":"1536:SCnzw4thxKWjQemOR3duEZG08YY7df85Jiw8Zwjz3Ui8wD8kVO1WilMO58wA1XXx:SCnzXn8ySEZV3U2ilM0A8pMB","tlshash":"4353e964be1064b644fb7265a03e4614b2b26d3aa703c090f6a7987c6afcd45235ffdc","size":64989,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.758514Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/jquery.themepunch.tools.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d4f48f4835f709ce89e903945463da","sha1":"da149c4015cbfcf532bd7d19171799fa45cec695","sha256":"df9d8dd88e97a897d0be8ef27eb76357d276aeabb67320756b753e5e61eac5d4","sha512":"815598cadbe84115a5ca2850049cca0e301b676a9a9ae713bdf5b012eef5f1324756b24213df112449f65fcbfb9d56b466ab7a955b372378e6ef8b0a6056fa55","ssdeep":"1536:XQpnayKBk7l5aknBDU0KsIu5XOD1ITONqvniqL3P99cN7H98rYx5f14/gCs0fXwq:XS7lYoDU0Gjqvniq7s7dCYSIn0fD0a9","tlshash":"5eb319ca35517022859622a5517f0643723bdceab4098d3df548d9ed3e2cc8921bffba","size":110419,"data":"","first_seen":"2023-03-07T01:03:25Z","last_seen":"2026-09-20T20:39:11.827159Z","times_seen":2637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6202acb74f6cfe2e509f8f5aae425b89","sha1":"99746dc2cc59d8f6b0fff40f2404559c50e9177c","sha256":"732c73508d0d875f79d51d6284cc5245975f59eb9db9fee3d8c66101b39b3d1f","sha512":"510f68f0d88fe15a59f6ba8e3353555e3e2554456a90ee3b9479e64200d3f59d1911a71a16b62dbbf7c7d4ce33caab36d328ab873d5cee389dceeffefc60b83a","ssdeep":"192:Fde3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:9MS/2f7R","tlshash":"1402b646f2016cff44a765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","size":8324,"data":"","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.743976Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery.fancybox.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc66bfe11f5191ba2c5fc67f1c225899","sha1":"98b7cd8f17890ba8d21ea774b0f8af9bd1d62dec","sha256":"188ff4d251f37ac33980dccac8afea788e030d8058fde62e6e7a6cea099d4c30","sha512":"2ae4c093b926d04bfae40705ed96b19e20ac2bedb3764459f127245cf3b637ab3d3c883e13ca271f32eff84c9b5a924f273290636e1f113f03b886eac126f10e","ssdeep":"1536:IhUc9mo46DjJ8b0Ux9NQbXy9PTujp1krP3XMKca+SYcS:GU4mo46Djk+bXyJTujp1QMKca+SYcS","tlshash":"ad73fb9a27206275cdfb2269a10fa61fb6779602f00c9463a0fd40505be2787d1ebfdd","size":80563,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-09-20T20:39:11.760172Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"\u003e longCodeInit","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439085},{"level":"log","text":"\u003e try","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439267},{"level":"log","text":"config loading..10","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"log","text":"validation...false","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":254413},{"level":"log","text":"config loading..500","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826}]},"http":[{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/about1-1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.645Z","timestamp":1789936685645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/about1-1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20285\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20285,"size_decoded":20552,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 250x298, components 3","md5":"b6a36c405ea9d92dc4a7ac1fa63c2029","sha1":"fadc78ed65a3d2330adf00295c581a1ef1aa7b3f","sha256":"5bf758e91ae57681fbad5ba944d609b8ff1c6acf27c2e29aea59657641c9b53c","sha512":"f5129478d56e01248cfdd9ca80050785e1161592baf4e1bf34efdc2a8549c95c7a8aa7d1990f86ea62c296176ab7f645bdb7f673ae5a0b36fa04e4e160008ab0","ssdeep":"384:TVhom9/dtMFyf8c/wKhc/fdjI66L05ELyhxK+1dqhsf:TVzNdWF0To19kdL0CyvHchM","tlshash":"6092e08efabae7518c90f264fef8e89787625259239d9b50617ec439fa4d010c053b3c","first_seen":"2024-10-04T11:12:03.556935Z","last_seen":"2026-09-20T20:39:11.74056Z","times_seen":30,"resource_available":false,"data":null}},"time_used":2128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2095,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/3.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.654Z","timestamp":1789936685654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/3.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2237\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2237,"size_decoded":2502,"mime_type":"image/png","magic":"PNG image data, 143 x 84, 8-bit colormap, non-interlaced","md5":"7bf1a3c7e5ff66785a6c6165c0e41fdc","sha1":"0bd78a57bc709394ad07b759d93259ed2cb4a210","sha256":"4c11a4fdef52cd09589c270113c4b3c03cf9d6562b8477e3623808b84e21882e","sha512":"8d2929cb67d4a4a64a2df7a2140844f50d48dabb54908996e693535b977d78cbc8c18d8847f5dfa0ad8c1d32d980d105a4b6c265790911ba945fd57ca98761d0","ssdeep":"","tlshash":"a8410a6023e62dd6c7c82734e8bec5dcf3603e49c0494873cadbce27a905ab5a7a1107","first_seen":"2024-10-04T11:12:03.60981Z","last_seen":"2026-09-20T20:39:11.74166Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ggsggsgggg.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.240Z","timestamp":1789936690240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 20:48:23 GMT","end":"Tue, 17 Nov 2026 21:48:09 GMT"},"fingerprint":{"sha1":"A5:45:1F:A3:11:15:24:79:E1:DF:21:FD:FB:BB:07:64:A3:36:EA:A0","sha256":"03:50:0F:F5:B3:92:09:57:C2:06:97:D1:F2:1E:31:76:ED:B8:67:6E:44:BD:F4:CD:8B:C3:68:D9:BE:15:DD:B5"}}},"request":{"raw":"GET /ggsggsgggg.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9\r\nserver: cloudflare\r\nage: 31\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIghWQD5Xg2ax%2BQbmeVTXD8FIWbFdV9SZksen3L9mRfnhQqHQS3wlYTG%2BgiuCf%2F%2BQcrScNmPytTDBEsQAVOwoNIgZbSmBntqMD9V28T1JxuPjWDNtlyEOAbqiVZxoSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e3a1da0d7a569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":540,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-09-20T20:50:23.321332Z","times_seen":10562,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/jquery-ui.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.768Z","timestamp":1789936685768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/jquery-ui.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6753\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28921,"size_decoded":7064,"mime_type":"text/css","magic":"ASCII text, with very long lines (28921), with no line terminators","md5":"af87c6b7c95019398afdacee1c022d69","sha1":"149630d4f8bac6d6a219d1ff7b932c7380b16997","sha256":"4a41bcafe6fa9f754be593b27d059bae5f5c3de0717266872ffb0a595f743637","sha512":"5096bf85ed5b98150bc20a2075c18338d2c937cb661c8ab5c8ebf22b6d6d85a185fca54e3cb0bdcbf14f3a88b28519d72d4bb46ec4a82dee13830272171df9bc","ssdeep":"384:QMhcVOzBA/1ezb1zy9xny+466GH5NYSc7nfZBhVtQ:jzBAsb1zQRC66GH5NIBhY","tlshash":"02d23130a4c2253dfe33d22061e11ef4513bc252eda21fbda09ab75953ea8e4c57b971","first_seen":"2023-06-05T23:31:04Z","last_seen":"2026-09-20T20:39:11.74305Z","times_seen":55,"resource_available":true,"data":null}},"time_used":4074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4066,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.328Z","timestamp":1789936685328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.actions.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2631\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8324,"size_decoded":2870,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8089)","md5":"6202acb74f6cfe2e509f8f5aae425b89","sha1":"99746dc2cc59d8f6b0fff40f2404559c50e9177c","sha256":"732c73508d0d875f79d51d6284cc5245975f59eb9db9fee3d8c66101b39b3d1f","sha512":"510f68f0d88fe15a59f6ba8e3353555e3e2554456a90ee3b9479e64200d3f59d1911a71a16b62dbbf7c7d4ce33caab36d328ab873d5cee389dceeffefc60b83a","ssdeep":"192:Fde3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:9MS/2f7R","tlshash":"1402b646f2016cff44a765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.743976Z","times_seen":695,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/jquery.fancybox.min.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.765Z","timestamp":1789936685765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Jun 2024 15:31:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3170\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13735,"size_decoded":3481,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"9ff76aef7d5703545be477880384cf3b","sha1":"b22e45ebc44390a82b6c357692fa6b5657b08610","sha256":"a0fe128eafa7a5500f57a324cec07d3bb7fea5712aceb02fc4835ae2d9fd2c9e","sha512":"9b2100f964620a1b5a6d08673ac9dc8fce5c4a06940cecaeeca924797f9f57eb694c47235a621cc8221dd65db6f3a356c04ce713880c702845f2455220c62d1a","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAipEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAo55fJ","tlshash":"76524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2024-10-04T11:12:03.45004Z","last_seen":"2026-09-20T20:39:11.744646Z","times_seen":31,"resource_available":true,"data":null}},"time_used":4077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4069,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.896Z","timestamp":1789936689896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k5nOTLd29UCGEAdkwl66y5zY3E7UyPxCEgXCQFLDOpB+VByV/QGAJjjSeS4TlomArndfhnQ\r\nx-77-nzt-ray: fdb54123243a69f05a44b06a0f97a10f\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 56\r\nserver: CDN77-Turbo\r\nage: 0\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6050,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T21:03:16.918382Z","times_seen":9543,"resource_available":true,"data":null}},"time_used":3399,"timings":{"blocked":0,"dns":30,"connect":8,"send":0,"wait":38,"receive":0,"ssl":3323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/color-switcher/style-switcher.html","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.151Z","timestamp":1789936690151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /color-switcher/style-switcher.html HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 496\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":957,"size_decoded":735,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"796e6845bdc8f1b833d5aa6a4b96b073","sha1":"e0babe1162cd18fa8fa5a0da10017a0abf24eecd","sha256":"28ab54e1bb505a0dc6c9625787b95ca6ba7e1dbea9b88db91ba76e62607deb81","sha512":"93ab488751910a256c6119e04bb630c684734636e7156bd3f45621d53fa9bc8ac8a2b490f4979439c418ebc377856beebdfd3465f8633ffb43457f3c84f8d251","ssdeep":"","tlshash":"4911406f480e0e7e12008362f110322ec0cfaf5baa466480e47f0ab66ad0785c53d598","first_seen":"2026-09-20T20:38:52.471316Z","last_seen":"2026-09-20T20:39:11.745893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery-ui.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.351Z","timestamp":1789936685351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/jquery-ui.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 73387\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335262,"size_decoded":73627,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2340)","md5":"5985b55bef54c76cd240b87bc192ec0c","sha1":"84ca3f631b00fefece523a682e5341dd75ad886c","sha256":"1ba5287a919753a8fdb18929f1e3e7f6ccc31154169d254872080d11a9b1c4ee","sha512":"55b074665b0360dd7dcb8147e3510f7e8599f5d56a9b97ac9be9ba22536829e6b123fa145678f53b5b48948aa49aabef6ce8bf53c3d7a05d9f2e9e0c9c09ba7d","ssdeep":"6144:cjdtixAcT6eudN/CNTfq0226eAoC1mBeBnBNHLCQ/2I:c/i/LmRCNTjeBnBNHL92I","tlshash":"4564f90d7300363a89efe26e146b674e723691999501406cf4788dcd6bbde01a1bbfbd","first_seen":"2023-03-07T15:34:48Z","last_seen":"2026-09-20T20:39:11.746905Z","times_seen":134,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1336,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/select2.min.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.767Z","timestamp":1789936685767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/select2.min.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1983\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14966,"size_decoded":2294,"mime_type":"text/css","magic":"ASCII text, with very long lines (14965)","md5":"9f54e6414f87e0d14b9e966f19a174f9","sha1":"ae5735562faabd1a2d9803bbd7bf4c502b5e4f51","sha256":"15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81","sha512":"9cc365a6e6833ebaa5125b37217fd0e7a1f7eaabc1012c1bde2a6ea373317966ec401d7cf35a31d1c46fed43d380196b8aaa329eddf92a313080651e51720f9f","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF","tlshash":"3f62b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T09:15:52Z","last_seen":"2026-09-20T22:44:22.250684Z","times_seen":23243,"resource_available":true,"data":null}},"time_used":4075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4067,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/fa-light-300.woff2","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.044Z","timestamp":1789936690044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/fa-light-300.woff2 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 340136\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":340136,"size_decoded":340404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 340136, version 393.14155","md5":"462b09925c9e0d39ead29d072b12615d","sha1":"8f1f59eed4e2617fd2bdedaf5ca30ad102a115d2","sha256":"cd8fdabe5161d05bc992f4e149092c3e38c209c734b3c1140c47f77258a20858","sha512":"dd426a8e267bddbf2779f616d2f7b607c032b11e82dd26b24171d483884baa00b415490dc03315e32ce17b59ad6de6234f8fc385dda37bcc1caf2dece2d6725c","ssdeep":"6144:VqZmtlZzAa+kxQDXyoxPVEGLhwmTZbWkfLXLtWr1gY6Qjqgfyd:0ZmtlxAa+lDPxPVxL2mVjXLt6ZjqgO","tlshash":"7d742269cf2302ed23d06978e31826c6171cafcd490aab3d901477bbe94779a7b67d40","first_seen":"2023-05-04T11:03:34Z","last_seen":"2026-09-20T20:39:11.748624Z","times_seen":312,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.331Z","timestamp":1789936685331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.kenburn.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1616\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3750,"size_decoded":1855,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3515)","md5":"e896609a9dcda2308e1e9dd0e95d38cc","sha1":"bcd509339309cad5c921860069b095321e38071d","sha256":"c635d40308367a226983ba271f569bf14e65c8be6b3a25ff0f61b8bac60d71d3","sha512":"8c0478e90895afc14e5dc5ca44c9e64bcfe000602def9ea053604423551c82bdd4f5446573ce828b02aa58ae791935f08e748a516f4bdce6f55c0d3cf69941f4","ssdeep":"","tlshash":"507132d220166c5e4ca3a39295ef17c663f1ed2835039c1c9772b5806eccd1d29bbb9d","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.749242Z","times_seen":428,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/ScrollTrigger.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.358Z","timestamp":1789936685358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/ScrollTrigger.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 7470\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16145,"size_decoded":7709,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"4dba3a52d5026176acf0ec7b8ea3eba6","sha1":"88c2055ca55b52830964a8680bcbd40e46f713b4","sha256":"0dbc27f62d87e11d968089fb99a391c3c77a3e4b63ec1f765e0295c9e43807b2","sha512":"714e21c2c522a17309d6b080722f360111cc9edcb25ed351f15788283c9795b7a95f26463623b3b1adedd9ba01b9c3e46495f7b4feabdb1fe4b7e7e4518adc64","ssdeep":"384:dSAHRd3dYuIUvLVfxq4YT7HAYxwvYf+CgdKQbAmyaEN:dSEtvLVKUvu+NwMO","tlshash":"337217ce7245b062279f6235a45f410a733a009c6a0f0664f364e8e47db92bd932ff9d","first_seen":"2024-09-07T13:45:05Z","last_seen":"2026-09-20T20:39:11.749841Z","times_seen":158,"resource_available":true,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/avatar-1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.642Z","timestamp":1789936685642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/avatar-1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1090\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1090,"size_decoded":1356,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 36x36, components 3","md5":"b3db4832417963ecc2c1df440dfc338a","sha1":"ac6a55152fcd57a93fb8232f8efae74485930abf","sha256":"087b2c526d8ecf15ade5833def140126639283ff4439afb3f3cfa3d1eb4ff94c","sha512":"491383a871855ffae35f2572b1e2093e79ca97e5c95fbd6cfdad545cab4bdcce7892b948b776aee06405aa8e6213f07e723ef51dc6ec04aac884cb4eba764ab1","ssdeep":"","tlshash":"a511a8496587d32bd0219b35cddbda7c50898cc373e65efc08b3e44899213c04a85594","first_seen":"2024-10-04T11:12:03.538127Z","last_seen":"2026-09-20T20:39:11.750743Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/css/navigation.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.306Z","timestamp":1789936685306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/css/navigation.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 5600\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44435,"size_decoded":5911,"mime_type":"text/css","magic":"ASCII text, with very long lines (44435), with no line terminators","md5":"ff9b4c84026f7a99d23026d855a588a3","sha1":"9492b886f3aefa09a59c88f91c2e78952c64e65f","sha256":"933eb913ddef37c3f90af5f54ea0ad8421d92b82f9a8771a9d30b0ea6574d917","sha512":"88fd50bdd7eb3b32adf6a72d7582d79045d527897e4fe17449567e2a2aca3e45a015f573a2a057e842eb81cbd6d462e3e3f55d22c6d0bf335bb2103b2ca06421","ssdeep":"768:7WIqqKuJrrUgfCxmK1WaLegFobHFr81UEJ3H9uQujbE8ny:7WIqqKIrrUgfCxH0aLegFOLE8y","tlshash":"9313733482876168f223d651e7c097ac623ec117f6630aaff25a78d7c7424de157a38b","first_seen":"2023-04-08T01:54:40Z","last_seen":"2026-09-20T20:39:11.751745Z","times_seen":121,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/popper.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.320Z","timestamp":1789936685320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6662\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18593,"size_decoded":6901,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18506)","md5":"8ba39ec9e010ade7661f4cf418ccf4cf","sha1":"04c6c2638dfdfce2fe7fa7acfc9294f21e067b1d","sha256":"a218b23f23e8fe9cbf4b810716f15ba06634b87a19ef1427197c1c3e1f89b33c","sha512":"d5dec489080ad83a76bae36b113d8e7cc00c6fc08a57d51c99a8b224a2f76a2a6e2af256d40e82d138282bed3515728bf44bd651f4bffa1beabf1279a5bad63a","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4s:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy8G","tlshash":"f982c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","first_seen":"2023-03-12T15:58:50Z","last_seen":"2026-09-20T20:39:11.752354Z","times_seen":362,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.341Z","timestamp":1789936685341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6887\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29066,"size_decoded":7126,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28818)","md5":"4f55a45f6fa3d90089cd37988b744e43","sha1":"c7c799481be4517f8b39dba57fe88aaa325df909","sha256":"528240420dedd03c508141f501169017954b9724ca8334ccf96582ecdad4f5e2","sha512":"c14ecff64a998b11b80940227040c04a2040f95871b6d2a919018f86a60ccc2c1438fdd81b1e23192b31382f270a72a481057a1d3d79a194eb267209a72eb23d","ssdeep":"384:u1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:tpwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"1ad2e8dfea264c6280432142d3f589162219c977fe326fda37e9d0b505d305e22fbd9a","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.753221Z","times_seen":527,"resource_available":true,"data":null}},"time_used":1421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1270,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/flaticon-set-logistics.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.772Z","timestamp":1789936685772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/flaticon-set-logistics.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1644\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9813,"size_decoded":1955,"mime_type":"text/css","magic":"ASCII text, with very long lines (9813), with no line terminators","md5":"ebb5c7969d29e66d95346561559c7c8a","sha1":"9159d813da166497421d3b14e12bbe38a537b4f6","sha256":"74ad81b76a7afaee0481f7615a6a98c0f580ced6d6e60c3e94093d08beaf5153","sha512":"cfa1ee5de8941b0cb84d076ee6756a066d08d4c9297b72d8bb2e14901b8dafe6155c62f708ccc630ae9b9d040e38a11df7b203d207d33baa87cfb3661e97ec95","ssdeep":"48:sIvQGDN5hI84WtWheaViTcyQW5zRS9KAG6gv5D5JTrwrlACaBIsoVHmIyrwccxuy:zvf9KViTWWxYqNJnwKWs9rVcYGKi","tlshash":"a112e2a4d42f00c4a772ca0befa97608e795b129ddc0dd66f05b4a0cfdf1b511382ab9","first_seen":"2025-08-06T06:43:07.606834Z","last_seen":"2026-09-20T20:39:11.753816Z","times_seen":6,"resource_available":true,"data":null}},"time_used":4072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4071,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/style-dark.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.312Z","timestamp":1789936685312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/style-dark.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 05:48:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1251\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5091,"size_decoded":1562,"mime_type":"text/css","magic":"ASCII text, with very long lines (5091), with no line terminators","md5":"5146e0212ba61f8e85426e1a8115727b","sha1":"512a04522d0c0b6fe8c45729c8ae7655e449e635","sha256":"6596cdf9d1e375bed78b4d0f5f8baba3821efaadba89917f5b12877958750c23","sha512":"1df82d425d2ff5f7bda150d55899b7fed1ddba31406801bfa174672f3caeb7383515f9d1ffea8b9ddb8d8ba9d03d9babc0afa636462fadc9cb0fb8bb021dc4fa","ssdeep":"96:91Q97vqELQq0vcRvmHcmbHc5ts0WC6GbPyFISLoXHE2ilXyqh3aS63T:7Q97vkq0vcUQts0WC3bP8LoUVxBal","tlshash":"02b1ef49d82109be2303573d78c9fa5cb215edb0ea511bd0f179c4585aee1ba18b2f8f","first_seen":"2024-10-04T11:12:03.435929Z","last_seen":"2026-09-20T20:39:11.754627Z","times_seen":32,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.761Z","timestamp":1789936685761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 20:38:05 GMT\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12072,"size_decoded":1425,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7a51c5f409c91fe68fb9bff1d43554e","sha1":"ad0e0d03ba9ae8a8a24d8be6a92696f17e10b388","sha256":"0b92350d753a6585f40a93ff2ec8b2fad0cf454ed9cce58900aaca3f7f1569a1","sha512":"9d1b1b61b3e1b46db232a157cfcbda4696df53940bac795c875fc2076e2969a3ec8d6f5116a520627771e6a819b24eefc349a894599bd1965298a093ce195a4d","ssdeep":"192:4JorV3dd8yoJx2V3888fzJ+pV3nn80KJ3kV3uu85tJMPV3hh8GEJFqV3QQ8js:K2sIQ2ksAmEo7","tlshash":"514286a1012be804ab470cd677ce7d399d4e6186708584b69bfe1c9cadebd32336075e","first_seen":"2025-09-11T02:45:56.354441Z","last_seen":"2026-09-20T20:39:11.755458Z","times_seen":127,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/flaticon-set-logisticse381e381e381.ttf?622cb10d1ce0f8ff8b951481e94e9412","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.040Z","timestamp":1789936690040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/flaticon-set-logisticse381e381e381.ttf?622cb10d1ce0f8ff8b951481e94e9412 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/flaticon-set-logistics.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 82895\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154512,"size_decoded":83207,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"36bacdb4f252381037311e954a23bb1a","sha1":"28023232da30721cffc25c91d53f7cfb1f38c2f4","sha256":"c62e6dbb3844529572425ecc8e366db3248b1fdfa2617874c38eb4562e37470a","sha512":"637b077639c1c41e1921e6c42cc65b41b4a8bdf5cba9a43f589075436994456dafde7c139aef0428315891beee808aa3a8f4067465f45fe5a39fde383193240e","ssdeep":"3072:0BjDk0xH6xww+hbFllgFJU9dWm9OqqYT7V:0tQ0t6xww+tFMLadWAqYTB","tlshash":"cce34deef3af0da6d36765bf8c9445268aa4f10812d378936e4c252c8a13cd94ff059d","first_seen":"2023-12-31T21:31:28Z","last_seen":"2026-09-20T20:39:11.756468Z","times_seen":83,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/gsap.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.356Z","timestamp":1789936685356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/gsap.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 23914\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60532,"size_decoded":24154,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60236)","md5":"7dad1a81f3ad4813313c0a3340da637b","sha1":"2033e4cc6c454aeab08cc8d0f8eda14a0320e441","sha256":"c101cf4a7ec903b931112ceaf3f813488692a8096dc5616a1adb0ab022576e4e","sha512":"ffe6aa08b877738def01cb7083054c125d5c234fcb200d52b55b0d12e85588bfb035e9b7dc0c01122d3e27ffa490544c2ba6a0c79d7d1890b95b6110ed98c860","ssdeep":"768:RIY2Di3rHJCGE7FbHiVLdA1Q+AbnDbhWt0L/qwLELyL/t11FoKoT/YQXaHwnrcRO:Rh2W3rCi3aC7BWGmxc/tIpQuf","tlshash":"3143f8cc3292f42643975165447f0a0bb337a998640f0518f269e5cd7e3c9aa42bff7a","first_seen":"2023-03-14T10:19:42Z","last_seen":"2026-09-20T20:39:11.757219Z","times_seen":101,"resource_available":true,"data":null}},"time_used":1407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1361,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/bootstrap.min.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.301Z","timestamp":1789936685301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 20472\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155874,"size_decoded":20842,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"9a34a157b5280f0e6b68eceb493ddc54","sha1":"cf88cb7d8a1bbd588752861da225fa4cc781c7bd","sha256":"c1fc69d4a1eef204b8ab46ea96cf6347c612100bcbb8a96769c8ea7650096d38","sha512":"ccd986b285602533f8eabf9b2efaff392cc6dd24ddf652c256d44d97d81cc9b8a93c2e135f2a64e3a43c8ef3521f046da204ea5a009ad970f2b1f376e1fe3be0","ssdeep":"1536:d0bwW83RipVVsEBpy0cuJcI22RWb5CyVUpz600I4fM:d0bwmyVUpz600I4fM","tlshash":"38e3a3d7f581241dd4a7c259a0d1bffd052f4586e3025babb0277bb88b8a6c70963e4c","first_seen":"2024-01-08T18:56:30Z","last_seen":"2026-09-20T20:39:11.757863Z","times_seen":59,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.323Z","timestamp":1789936685323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 17919\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64989,"size_decoded":18159,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64660)","md5":"d9c8ab83121aea69abda4bebcdb56cce","sha1":"ce5e643bdf3c21429faae3517d86b5948d073ed0","sha256":"b0ea84434d935db0db78525789729bf90ba04ab5a1c279379fce0b7773ea2c96","sha512":"a30a5095f0ad8f72a7921dfeff3e79ae50590cbdc207bbb213bc60bc000c0d4298383d30413090078ba70cfdbc89e97d984cc516be64f3471712b040d08ea986","ssdeep":"1536:SCnzw4thxKWjQemOR3duEZG08YY7df85Jiw8Zwjz3Ui8wD8kVO1WilMO58wA1XXx:SCnzXn8ySEZV3U2ilM0A8pMB","tlshash":"4353e964be1064b644fb7265a03e4614b2b26d3aa703c090f6a7987c6afcd45235ffdc","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.758514Z","times_seen":738,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/bootstrap.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.347Z","timestamp":1789936685347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 15722\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60089,"size_decoded":15962,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59810)","md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-09-20T20:39:11.759546Z","times_seen":6664,"resource_available":true,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1278,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery.fancybox.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.348Z","timestamp":1789936685348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/jquery.fancybox.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 21768\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80563,"size_decoded":22008,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2304)","md5":"fc66bfe11f5191ba2c5fc67f1c225899","sha1":"98b7cd8f17890ba8d21ea774b0f8af9bd1d62dec","sha256":"188ff4d251f37ac33980dccac8afea788e030d8058fde62e6e7a6cea099d4c30","sha512":"2ae4c093b926d04bfae40705ed96b19e20ac2bedb3764459f127245cf3b637ab3d3c883e13ca271f32eff84c9b5a924f273290636e1f113f03b886eac126f10e","ssdeep":"1536:IhUc9mo46DjJ8b0Ux9NQbXy9PTujp1krP3XMKca+SYcS:GU4mo46Djk+bXyJTujp1QMKca+SYcS","tlshash":"ad73fb9a27206275cdfb2269a10fa61fb6779602f00c9463a0fd40505be2787d1ebfdd","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-09-20T20:39:11.760172Z","times_seen":73,"resource_available":true,"data":null}},"time_used":1414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1338,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/linear.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.766Z","timestamp":1789936685766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/linear.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1726\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9114,"size_decoded":2037,"mime_type":"text/css","magic":"ASCII text, with very long lines (9114), with no line terminators","md5":"925e604971c1f54a9c9a4b2e2a193f99","sha1":"79476c8624943b705c99c445933825718874d38b","sha256":"bbfddabb88554ada1e9abaaea2c9fe4bca9946b61140e6cb444380a4f7a97c7b","sha512":"03ce4259d605614797b409c54eaef3ea249a90a233db807fe2a4f90468815f1d18ccf20393f4a64611609c1a2d9035cbb4b84077e5464e1199811202b24ceeb6","ssdeep":"96:zyRX+rPo5FwHa0xSF8fw2lB0KOtnte6NFCgxVX1zjo0:zuX+r0OHa642lB0btw6NFCgx/zc0","tlshash":"f912e7e6e1c961caf7b1c803a741b648609ab130dac15e52f45fa50eecf136719c6f78","first_seen":"2025-08-03T22:50:52.536887Z","last_seen":"2026-09-20T20:39:11.760788Z","times_seen":9,"resource_available":true,"data":null}},"time_used":4077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4069,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/images/background/1","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.991Z","timestamp":1789936689991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /images/background/1 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 496\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":957,"size_decoded":735,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"796e6845bdc8f1b833d5aa6a4b96b073","sha1":"e0babe1162cd18fa8fa5a0da10017a0abf24eecd","sha256":"28ab54e1bb505a0dc6c9625787b95ca6ba7e1dbea9b88db91ba76e62607deb81","sha512":"93ab488751910a256c6119e04bb630c684734636e7156bd3f45621d53fa9bc8ac8a2b490f4979439c418ebc377856beebdfd3465f8633ffb43457f3c84f8d251","ssdeep":"","tlshash":"4911406f480e0e7e12008362f110322ec0cfaf5baa466480e47f0ab66ad0785c53d598","first_seen":"2026-09-20T20:38:52.471316Z","last_seen":"2026-09-20T20:39:11.745893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.243Z","timestamp":1789936690243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3aXi1koHyXcsIfP8hGmKgY9%2Bh1jVYhtaHSwAX1r2b5%2Bg%2Fwlxc8J4i6iTgmYamoARV6TCtf8%2B%2BPwvQZtqbUPHiCaNjG3%2F6CAF01eOr%2FVElvepL25OAoEEkQEpT%2FBA8JBPiVIg1c%3D\"}]}\r\ncf-ray: a3e3a1edcc23c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T22:48:28.428778Z","times_seen":18574994,"resource_available":true,"data":null}},"time_used":3234,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":74,"receive":0,"ssl":3154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/service1-1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.647Z","timestamp":1789936685647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/service1-1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25963\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25963,"size_decoded":26230,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 370x260, components 3","md5":"44a318dd6894a4c95fbc0cf589c6bad9","sha1":"c70fcb0804ce6fd65d5f3d91e4b5f6bca29dde13","sha256":"36576ae2a1f0850abd31f306a4c59f727a9d0c32b88c09ff2b8938f49e2513d8","sha512":"7a6deddc580bf16caf866d23f3a3a7fa3f1efc7d12d0999e6c04f0bf30e1912e96340da4c5f194e9e174c706e6ed7f202bd2ce6416be74eefdbc728d4688b9e9","ssdeep":"384:Wz7jsrBTX8FFMjdEAQ7bogPFk3OeqtIr80j/bydSeSVl+LW0zQc4M3bSWZHdb9:WrMKFRa3As8q/bSSRVlRaHusdb9","tlshash":"e6c2d0e267091b4ee4ad59e1103243f1cf0ef2de61788b6ea2fa9838665b441c5dc636","first_seen":"2024-10-04T11:12:03.562242Z","last_seen":"2026-09-20T20:39:11.761991Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2096,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/owl.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.763Z","timestamp":1789936685763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/owl.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 847\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2913,"size_decoded":1157,"mime_type":"text/css","magic":"ASCII text, with very long lines (2913), with no line terminators","md5":"3137f88f4788c98c61271fdfef64ddcc","sha1":"907b985b48f971df3504e9a3577fdb3a975c302b","sha256":"c73658cee6f6a14626e8e5514d998b5471a6ee3a29422c3891b350f1db35944e","sha512":"1f024d6a248b99b50bdb3bc12e65cb5b8695d2976285b5369e737ab16f572d5da776c23abee4c0fcab1e106c69a29239da4834783606b4804f331d1eeeca0def","ssdeep":"","tlshash":"2551afe62147225e441fc7221ddc1d46793dcc93c8660a9aa2bbe614879af1d112fbcf","first_seen":"2023-07-29T22:13:27Z","last_seen":"2026-09-20T20:39:11.762884Z","times_seen":61,"resource_available":true,"data":null}},"time_used":4079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4079,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-plane.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.971Z","timestamp":1789936689971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-plane.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1263\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1263,"size_decoded":1528,"mime_type":"image/png","magic":"PNG image data, 171 x 93, 8-bit colormap, non-interlaced","md5":"9b578dcf9905ec60eb51bba7d6b32762","sha1":"7bc8d06874b2cc4e481b782489e969891e13ff9f","sha256":"8681a1177f40f60895f4dafd7a4b199c78a2c5bff08424ca7cac4665a56b0f84","sha512":"430ac00ecfbaac768136773ae5c0fc3f9aff8b7ec4e4916734db7202967af1bd205a115a6e211418fe3f6c44512117ff8f6bf4edcab8d5fff6e34fc928478f8f","ssdeep":"","tlshash":"242196e750006fed55b7d2239c0b2116e0ab5e2d644286dbe36d361f09396ce87e44c0","first_seen":"2024-10-04T11:12:03.575012Z","last_seen":"2026-09-20T20:39:11.763504Z","times_seen":33,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/linearicons-free842984298429.ttf?4l2k0u","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.048Z","timestamp":1789936690048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/linearicons-free842984298429.ttf?4l2k0u HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/linear.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 32400\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66136,"size_decoded":32712,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 24 names, Macintosh","md5":"f998369775e2ce9e30d9963f1f646b84","sha1":"b675857855471d8a82eac9027c7c9f091cc1ada4","sha256":"2f2d8e8daf9e0a620acf0223472bc53f7e4c47ea21792907854df68496c2db7e","sha512":"cc00b3bd539bf4ed0e64b627b06341909a7a77dadf020467ad9610d1db614bf23bb9e8525dda7acf9162060c3e7f1f76561c34b4d09d53fc1f20d861494b53e3","ssdeep":"1536:gceQfgxFZHhNQAOJfwXab5eXeGiN1fF/o/ZhhWbvQ8oMN1buozqc7ObbzkQtpgPh:gceQfgxFZHhNQAWfwXadeuGiN1fF/o/c","tlshash":"6b533a3be7e7df6ad826eeba7c56e1210cd68230d23dd7c966865c06c00d4b48c6ce56","first_seen":"2023-05-25T05:43:15Z","last_seen":"2026-09-20T20:39:11.764299Z","times_seen":311,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/pattern-2.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.988Z","timestamp":1789936689988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/pattern-2.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20067\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20067,"size_decoded":20334,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1897x704, components 3","md5":"258f4b470292bf97ba07a6d3bc03ab9c","sha1":"bb92381531a1eb46add1ab61bf2d8743700daa68","sha256":"a2a6047eade2915b269c6ca120797de19cb8847d1fb9be5b084cfca5d3eb6182","sha512":"5fbf7f747286f78acf4d255078be7722bc82eb78dc1ed33d714afbaa6d3a8fc23ee1b48b32615b55ab3ed4f1eb76b388521fd4fed8de4fc7e72990a339bb73d5","ssdeep":"384:peabjraXSNPnnsDyjxZ0O5azj5uDsT+9IMbdvn:p/bfNPnGExWIaYDai/","tlshash":"c292f8e3ab20c347c73a1b349bd7b3743af72b729b441c274e4614356c66e56aeac508","first_seen":"2024-10-04T11:12:03.599091Z","last_seen":"2026-09-20T20:39:11.76584Z","times_seen":33,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.329Z","timestamp":1789936685329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.carousel.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2634\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7601,"size_decoded":2873,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370)","md5":"7c408abeb4d361212429635b4b519b64","sha1":"39469d335fe140483a83eb62551b703dd449a6c1","sha256":"50babb9481295e182b05c23d183309df0ec0de16275b443be86875ce520e1b2c","sha512":"1cdeb8e3d662ce3e6294174ee97a1c107ded37a90585f699fc011c0cdec9567e04315f9d82b26b1b144ba151a24b798dd7e5aa27c3c7e2e26c2e805aef05e824","ssdeep":"192:xpN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:WqIypeQsZWqf9","tlshash":"11f1728460143caf0652b389966680f963fc294c672bd8647cff7165085cacd027feee","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.766693Z","times_seen":942,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/splitType.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.359Z","timestamp":1789936685359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/splitType.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3491\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8382,"size_decoded":3730,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8382), with no line terminators","md5":"ff97bd0220097f25268b128681f48ab4","sha1":"29812a88964104209eacae5a0dd098e816b3f615","sha256":"b967d75177da82a3bf7d3b6fb6a88f3883dbabed0cca94fb9a7f3a7e92412fb3","sha512":"77ea828b0b8f937a31c9ad0cddcff88cd930782c44379b5d5016d3246253eca82f092ffe491f2de32d1e7888b86467504371852a1572be1ce324023b78e28ec4","ssdeep":"192:+A2isE6gQC8yqLpzHMIWzpx9m9irRdtGvGH/xoYA9RrCdp3WApsw0s2U9URmg9y2:+Us3gvwzHxGWkavGZoTRrwfs9UGRmgY2","tlshash":"6d02b6857227f56056991469e0fb131af2341036711b91a4f4bdecfa7824cea23b2fe9","first_seen":"2024-09-07T13:45:05Z","last_seen":"2026-09-20T20:39:11.767616Z","times_seen":59,"resource_available":true,"data":null}},"time_used":1403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/feature1-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.644Z","timestamp":1789936685644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/feature1-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50297\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50297,"size_decoded":50563,"mime_type":"image/png","magic":"PNG image data, 419 x 550, 8-bit colormap, non-interlaced","md5":"91101a7d6ed33b06b7aa07862a177676","sha1":"6c6221d0940741d0ca7469f25e29cd810b7b0ac7","sha256":"96caca58e0679322c86790253d0856fc5c248f60b6d1861aa553b378cf47f945","sha512":"028f275f557a5f96bba4edef50dd7c74602cb6235c3d2c3be0b1f5ebe8b54876eca01b4500c7272ac9694a15655b965bdef597b2c5e03fbc7784258e90727cfb","ssdeep":"768:xaOJOkKzsfizzBCTQ8U2WelpLiEpF1RyPKsvbLnGoJyZ5Cst:xGkMW5TrXlpLiEpbMvzGoJ2d","tlshash":"853301a477475eb706848ae6a5ea25cc45c116ea2803bf46fed937bb0c8015b2748ced","first_seen":"2024-10-04T11:12:03.554036Z","last_seen":"2026-09-20T20:39:11.768532Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2095,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/4-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.657Z","timestamp":1789936685657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/4-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1875\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1875,"size_decoded":2140,"mime_type":"image/png","magic":"PNG image data, 92 x 84, 8-bit colormap, non-interlaced","md5":"468b722bcab5b5dbe4027c78be039d32","sha1":"6b3300b48aa2df5f5746453b45e27fac73bfdcd0","sha256":"570d2b4fbd0884840c8065a2b7d3bb29e53092ad54b1a32de9601dc3f6b9f699","sha512":"8437dd5b84f0452530d6be64a0b4a4be78b41284417dba755fe137e43b7159d84dee53109679892128c4ee4975d60424d4b2dcc10ec861d726213cac386c1aa1","ssdeep":"","tlshash":"a0310b7e921f6cbed0a02df794a1d1183b76c5f5bfce8ca0da6ef678010161145618f2","first_seen":"2024-10-04T11:12:03.615998Z","last_seen":"2026-09-20T20:39:11.769389Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/ae477e886d96ea45a63b89b8405418eed69d13f2.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.186.192.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.352Z","timestamp":1789936693352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/ae477e886d96ea45a63b89b8405418eed69d13f2.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-ip/ipD64VgevBtoDSaYvq9l1xfw\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":880,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"567980ec741ee484ece1df451c20580c","sha1":"8a9fe2a43eb85607af06da0349a62fabd975c5fc","sha256":"1d2b97185cd0d9285f3d7a869a06b21418c4359b9f4b030ce1e6d1bb0101e273","sha512":"cdd10e5170c509b81a885934b1326225d606dbe29be98896616d511ed742a92d10a67a952072e469457cc2cc85b0798c4db06370e89086ce7deffefc811854fc","ssdeep":"","tlshash":"7221987d4aa822ed5245c7d6c5047e036bbcdcb371003e7eea0d0a0e30db2e6213646b","first_seen":"2026-06-09T02:10:58.976651Z","last_seen":"2026-09-20T20:39:11.770177Z","times_seen":6,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":4,"connect":30,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:17.247Z","timestamp":1789936697247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://extremglobalventures.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Gce9togm9l4o52Y9Qf2nOw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 20 Sep 2026 20:38:17 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GpFEVFnUbb8ZtQGYnf1OeJjdaCc=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T22:48:28.428778Z","times_seen":18574994,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":0,"dns":350,"connect":367,"send":0,"wait":22,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.335Z","timestamp":1789936685335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.migration.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6985\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26099,"size_decoded":7224,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25862)","md5":"0e0daef44ed6ad5559d6c29c0e413e0a","sha1":"ea8c0943a23a87528e394115ea20d3ae0d3e8c14","sha256":"fe1591e3534594f770789ebbf62b4d8657f735f87f8576fe8dca2d807b4d7079","sha512":"c5ea53743f997c9f568c10db81fd0a46a303bdeadd069a7451a70b4e12fd81e2316c7f04ffbdef0bacfcb809005cbbe87d6d3c7f63602a8d200858f51f009def","ssdeep":"384:XhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:XIObR3zXpcN12H2DqZ9iA9QE","tlshash":"dfc2a8a9769038ab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.770779Z","times_seen":512,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/main-slider/1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.639Z","timestamp":1789936685639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/main-slider/1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 314199\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":314199,"size_decoded":314467,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1894x821, components 3","md5":"f73d573384e1986032b424a5c6716afd","sha1":"fa3cb9497ac3adb9e8cf3b735c754a16c3db0e15","sha256":"0f5de82074dea8724f3f1e5b56ec5ecf6f4c11adcfb1feba12decf95ac5eec7b","sha512":"242d3d46edabad8f456268e9501a785d3b610ed7d7dffdbaba824c2f04854a334eb6e6302647b273399fbf9ab96ef8567aab0b033034e2591e07ee0a19bb74b1","ssdeep":"6144:X6JiIMsln8nwMlXDn2iLNE0eE2I28RFzFfcBeKbFch61JX6vbW3Z9Q:X5u58rlL2iVe6txFfw5bFch61J8W3Z9Q","tlshash":"c16423d7c431ad922407b444e9adfecbdae6f0ff13b0395ba5813a39244619c35c497a","first_seen":"2024-10-04T11:12:03.53592Z","last_seen":"2026-09-20T20:39:11.77161Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2132,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.650Z","timestamp":1789936685650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3546\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3546,"size_decoded":3811,"mime_type":"image/png","magic":"PNG image data, 207 x 84, 8-bit colormap, non-interlaced","md5":"0b30efdd11eda54e239d967d707ad622","sha1":"c2922172142cfa34fb76e890f21b84e5df942f4a","sha256":"d76dc7b05c5ac61b99c2eeae52e2a97dd39de620f7aa8962a97855d829b43fe4","sha512":"5cfee4e997f53f2d879736062c98a79a1222010052690d720af758bbb0a5b285ae0e7fc8cd1161773fc542dd7155a42999ebc515768a501e0978d48137d0c2d0","ssdeep":"","tlshash":"ac713d4b63ef466c95def70c39504b338486ec1e73549af1955d2a68d743054e25224f","first_seen":"2024-10-04T11:12:03.569619Z","last_seen":"2026-09-20T20:39:11.773302Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2108,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.035Z","timestamp":1789936690035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37347\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T22:48:13.148023Z","times_seen":47039,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":24,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/avatar-2.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.643Z","timestamp":1789936685643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/avatar-2.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1176\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1176,"size_decoded":1442,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 36x36, components 3","md5":"b277b11dbaf91e14a579f8f60aa37da8","sha1":"b8acd3975e99e23a7d9d5b1210645e217d1e20f8","sha256":"f5320cbde5582d800352bb05452ffba66215827b873abc2aeab46444736c77ff","sha512":"bf5d2b03e42772f7b63660fc09148f31f0ea48be8e5571c2defdd450a07f1941280a3e269f14e69ca189421de836bc5c665a571411525ced97ea706ef9d862b0","ssdeep":"","tlshash":"3721b9afcd0aa507f2bb01b903ba8315f351a889ca77a7947447c1c048f75455d414d2","first_seen":"2024-10-04T11:12:03.539288Z","last_seen":"2026-09-20T20:39:11.783188Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-6.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.667Z","timestamp":1789936685667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-6.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3001\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3001,"size_decoded":3267,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3","md5":"3c9125d5728a165387584205ad44e8e1","sha1":"52a7c62ea0ab32980b52d0f45ae6ebab183e695a","sha256":"e462ae99fa25ca8e1321d8ce6d88e9fd2ccec228f4ab22125df2823aac456d4a","sha512":"39e17369edea526b5f56120126f2f6c1a82e669f4d17753be1958c0d4018ab193bb07a18e3a64c39c33cb9d8f1d7b42d51fae0be7d81ae5b988d621f89f28c08","ssdeep":"","tlshash":"4e513aa3bcd2cc07de2d153d5a272743d330a9796748e089d985e9609de51e7cd82248","first_seen":"2024-10-04T11:12:03.640148Z","last_seen":"2026-09-20T20:39:11.784781Z","times_seen":32,"resource_available":false,"data":null}},"time_used":4077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-sub.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.980Z","timestamp":1789936689980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-sub.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 213\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213,"size_decoded":477,"mime_type":"image/png","magic":"PNG image data, 48 x 8, 8-bit/color RGBA, non-interlaced","md5":"a9982f17261446cb91fcc108bfc13ed4","sha1":"3d4ba66509eb0ae2001712d08ce607dc08afc839","sha256":"9959084aefd6d8a4bbae99cdeba7c30061ceca2b530b23199800a76fa4e2afb6","sha512":"41a2a43874987572a4f8b9289162b6bce2d4883351f257c8c115834acff2013f2f85e40ff8526f4058056cfdc344a8902fe64784ddf244c44ced3edc20fe08fb","ssdeep":"","tlshash":"b5d023e611d17c1dcad619120211c13efdb553d811d22425e42f6d7815f504dd1c44c3","first_seen":"2024-10-04T11:12:03.590627Z","last_seen":"2026-09-20T20:39:11.78729Z","times_seen":33,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/2-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.653Z","timestamp":1789936685653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/2-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2622\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2622,"size_decoded":2887,"mime_type":"image/png","magic":"PNG image data, 93 x 84, 8-bit colormap, non-interlaced","md5":"87da148ef38a1db93b24f7ece25839c5","sha1":"2f1c89a35d020f75f8c85848153012da79058dba","sha256":"c01915e016580c75c7b3a39197c30c1b62229c638074f919a6e04335ffb26def","sha512":"c14d406348b30c975c0d51ebbb7f84782bdd741bad0e9dde0b20db2f6a09cd55309cecb9adf2b1448733ca828ef2389725e443a8bc1794f57408c20cf4643d33","ssdeep":"","tlshash":"bd514cf39743a665f52249c7888d9000d51ac633977bc9461e1bd53636233a35c96e8e","first_seen":"2024-10-04T11:12:03.608135Z","last_seen":"2026-09-20T20:39:11.788802Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T20:38:03.482Z","timestamp":1789936683482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 22:38:04 GMT; Max-Age=7200; path=/; samesite=lax; secure\nextrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 22:38:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 8376\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:38:04 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T22:38:04Z","raw_expires":"Sun, 20-Sep-2026 22:38:04 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 22:38:04 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"extrem_global_session","value":"eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T22:38:04Z","raw_expires":"Sun, 20-Sep-2026 22:38:04 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 22:38:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":59799,"size_decoded":9602,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (525), with CRLF line terminators","md5":"2ee5e4d07a4e21c313057628832e64f3","sha1":"33f7c11b4916cda35cbb8939494877f417beeb13","sha256":"0926e180b94f8145efcd6f523d3cd6dcb2ae8f27d80c88839b1b046f97a0f2c8","sha512":"8019f360fa6ba1eb376fd4e7e8a0036d0ef2e4f41680710615588034928e5ec3a64cf4357ae4f3a3e7752dae77c49434e6d417684d1fd2a73eda0b1e03a60513","ssdeep":"192:vAux0luAZ7mmAI/8nt1v0zeqgzecVYG7ehgPeOgQjsgfNzeqgzecVYG7ehgPeOgZ:QuJ/cGDGEFo2+HAAYodW52EK8Kuv3","tlshash":"ec43eb20a4e20273417f62c6ca245759fea3d347db9a87e076ec1b970ff2d198c13699","first_seen":"2026-09-20T20:39:11.790618Z","last_seen":"2026-09-20T20:39:11.790618Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1608,"timings":{"blocked":-1,"dns":5,"connect":69,"send":0,"wait":808,"receive":0,"ssl":725},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/service1-2.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.648Z","timestamp":1789936685648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/service1-2.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29636\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29636,"size_decoded":29903,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 370x260, components 3","md5":"dba0a5034f92889e32e3d7c03de22da0","sha1":"5cb2dd00de9587cceed8f82c2a4a25cd38d316ff","sha256":"c4344e47bcaa3e46d321e80f4af9ce70c4a74d54855eaefe509d443c850ca547","sha512":"277f20f9336149e3369a3caa74b11f86c7d617074ae0b689b8329acff2822b51a1b805d9e91a337a6b1e341da92a774724dad747071d97060936867690825433","ssdeep":"768:7pluBxUIq827TKwRjpPI5KsujRMKYa+rdjy3k0c:7plkr1qewb9jRi9yc","tlshash":"49d2e1fd22448759f46e2071dcfebed9fbabb199804dc16e1cb06a74d66c6800170d9b","first_seen":"2024-10-04T11:12:03.565462Z","last_seen":"2026-09-20T20:39:11.792224Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2104,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/tm-bs-mp.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.773Z","timestamp":1789936685773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/tm-bs-mp.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 4206\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62413,"size_decoded":4517,"mime_type":"text/css","magic":"ASCII text, with very long lines (62413), with no line terminators","md5":"f304a70b0f2a9a31abfc33486a0f51be","sha1":"384ea2d09d881fb9b571c307005e03159ba9df8f","sha256":"180383581fc062762fb4b387cce9b9b4c7be53e2669176117119ac41db3d0ce0","sha512":"111ab5477af4e2891de6100fa4d5957aa9992ebcf3339351c8c6ebf6cfd57008a2bc1aef268fbc21154f3a50d4a2bf8ce640c0feb29b497227e8e17bde3eb0b2","ssdeep":"768:HvfSUsBVDQes4G2k2Ie8+WkbVZ7Pp7ZnZLJ5NtRxpRh9dplZZd1RhbwAfd5:XgQes4G2k2Ie8+5","tlshash":"805312d3bad1240c952b8396c15273bcbe3fac95134aade3970a7b36cb545cb950092f","first_seen":"2023-06-05T23:31:03Z","last_seen":"2026-09-20T20:39:11.793287Z","times_seen":62,"resource_available":true,"data":null}},"time_used":4071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4070,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/css/layers.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.305Z","timestamp":1789936685305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/css/layers.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 8214\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104497,"size_decoded":8525,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0aaa87f65273a00f1c4ba1966b0749db","sha1":"7f0093cdd0570643bdbec9e4221f74820493767c","sha256":"a8f47650975ae618fefdb3cf8d136d0078d5a444196ad924cc0433bc31535506","sha512":"599380e90a10cfb8fe93e563d4130078e8e32430f5669a5f2418a29ee96ec872ae33cbd72b9d3093c7996a4880f14bc35a88b8747628f6a8c3b56f2fc377d22f","ssdeep":"384:4w45Dok8n4sb9k1pwjtoSRyrqqtXyezRfRNuqEYxVvUBAQhulzmkeHPRPF4ZDfwp:gm8bNR+NRe5PzL3bM9","tlshash":"b8a3a870f119902a70b7cc653550b9e8256e8242ba675b31f66b65b8cc8e1df7f2370c","first_seen":"2023-04-08T01:54:40Z","last_seen":"2026-09-20T20:39:11.794236Z","times_seen":121,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.339Z","timestamp":1789936685339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.parallax.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3273\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10927,"size_decoded":3512,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10692)","md5":"0cb7f05bc14594ea34596fd87f77b77e","sha1":"aa01890babe2fc27e69bf67efa4891badc611c0d","sha256":"a0ad9ea15f682280df7d61d146435e6954f235f0bf9e4a783d0eeb65d1ed8400","sha512":"f5c8ac1dd96b1179d610094393c646817440a5607590190e90f0c2212b0bd2c91e2a154f0115744cc955984ab8ad226cb999162e5543f8e2bf46680e8369b0d5","ssdeep":"192:WQwK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:P1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"4332d95a6e2028b640f3132cf99d45d273228572e5068d41f9e6f9b5566ce9c037abcc","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.795134Z","times_seen":491,"resource_available":true,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1272,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/about2-1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.660Z","timestamp":1789936685660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/about2-1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82344\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82344,"size_decoded":82611,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 929x550, components 3","md5":"d379b926c649f288734825748eb5c9ca","sha1":"e3bce5ddb50981d14c67006cbd0aea1cc0098882","sha256":"c46d6784a52ad4f91567cec7352a01613fad2e260e17b8b81ca017a95350b927","sha512":"71689b08d66be49826f3b9828957240055af94454d5908172ada308285a725aed0df051008b343b11654d99a2f2382129410c10e0d8a23c06eb06ed7cc8e936b","ssdeep":"1536:J6ZlWGMvy1yHJgaAET+2rpuHlmSTbuv14otOmo3+s5VagD4THNBi2ajH5CBt5pA2:gwppAIrpuHlbPy4pnkTa2M03r","tlshash":"7a83126e0818c352af25f4687a065deba9b1cf2a1560222f755510a7ecddf3c4b03abd","first_seen":"2024-10-04T11:12:03.621366Z","last_seen":"2026-09-20T20:39:11.796006Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3077,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/choose1-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.661Z","timestamp":1789936685661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/choose1-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 207946\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207946,"size_decoded":208213,"mime_type":"image/png","magic":"PNG image data, 1184 x 984, 8-bit colormap, non-interlaced","md5":"16ff72e7d7b0c3764581ac9c110e7c9a","sha1":"2032577a55cc16b229a283b926bc3f5a7f489941","sha256":"a93668433c8389389833cbe81fffd252b12838185bf28bb5536dc82d0f56ebcb","sha512":"37e90c8e07990c9d47d1c5bedbc8f7674e9328d5b2b8af4b4316e9fec26e74ce548465f6420a4d48cd3b75331c8e53c129645e672aaa004d0a69bcb3ba76b776","ssdeep":"3072:PkLtmORupW0yYZpln2dRSUdZKx8W2xQc0PJGFo0onMhqwtkik1TwYKd95KqSSjGO:c5R8H961JW2xT0PJGFVQMhqWTtK/SOr2","tlshash":"7c1423887a049ff94b4fb3743fc01f329588a67addc42d905a1bc21194d7fa696f898c","first_seen":"2024-10-04T11:12:03.635495Z","last_seen":"2026-09-20T20:39:11.796987Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3077,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.042Z","timestamp":1789936690042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37347\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T22:48:13.148023Z","times_seen":47039,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":41,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.794Z","timestamp":1789936693794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extremglobalventures.com/\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k3QiQ5f/XSWTGCJ5NF1JUIvADaiVl3FHngbR3wIlr4LlE6PBcKkM8G0J67zaLQkm/5nMNVc\r\nx-77-nzt-ray: e2f754207c53adf95e44b06ae8fc370a\r\nage: 165\r\nx-77-cache: HIT\r\nx-77-age: 164\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-20T20:55:55.043354Z","times_seen":1661,"resource_available":true,"data":null}},"time_used":3380,"timings":{"blocked":0,"dns":35,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/jquery.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.319Z","timestamp":1789936685319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/jquery.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 30771\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89660,"size_decoded":31011,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"feb4e61508f5ed2003ff10a83bf2f7f4","sha1":"0b8db67cf523658e69a16f0e7c0790094424095c","sha256":"71b94e8a0072eb4fcf4c9bd085c4dea60c65f5476beb19b37295462a2469c5e3","sha512":"fe9e4ed4d867fc596f4e4deec0ec8cc63186af3dbfeba6bbd1a591c18df924c09ac43fd52e24e9652b0bcf32cdb4758d1161c6e904a136e6b20b6b05eaa7eb8e","ssdeep":"1536:wjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvu:wdeIygP3fulzcsz8jlvaDioQ47GKf","tlshash":"0a93f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-13T15:40:12Z","last_seen":"2026-09-20T20:39:11.798629Z","times_seen":72,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/about1-2.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.646Z","timestamp":1789936685646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/about1-2.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40641\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40641,"size_decoded":40908,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 300x504, components 3","md5":"8b92b8554988a3368ebfb7fb0fc850d2","sha1":"1bf7ed25b988f6860f05d58a020ca9ffd96d8697","sha256":"2412efe6a9299961ee7450ea0d703251454ac9cce6c52d41a548224fbaa827e8","sha512":"8cc2147c43a9a5f8fc576a2a271c7d81c61a07fbd651bf854d351388d1b6b4c057f35ce8c826a477db22603e122a68b05d3db3bb5c8b761781c47f48881678d8","ssdeep":"768:Qe3fiAmEb/BdHq017sez7lai0mJiQRGmHzAmcBF52pIpX5817OSBtKcyvJnfY:FfM8r7se13JVG89+2pIpXSwnfY","tlshash":"d103e1bcb5771b4d05328bd5a3f2d78c7c08d704723e2a0a61f1a66c2a64ed5d37a28d","first_seen":"2024-10-04T11:12:03.559268Z","last_seen":"2026-09-20T20:39:11.799254Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2096,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/fa-brands-400.woff2","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.046Z","timestamp":1789936690046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104804\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104804,"size_decoded":105072,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 104804, version 393.14155","md5":"04f411f3f6c5167d09e9d398db65d3e1","sha1":"ee7dcef8093918055808ae32122003d940e200e3","sha256":"0e0772e0bd095e4edfcd4efd7a177e6b0d8d6a3afb31a4e4e692630f28748c8a","sha512":"c8607c0cb48f857da05f111816bb8b7b58e192562d07aadcfa297ba15d7cb873a5d043139dd321c653a6b0b756381aeddc292d468fa44a1915ca81b13a03f208","ssdeep":"1536:tKNfrmE1/z5Si32YXjnGwsahHvpXQ9YUKLwRY5SeQNNsPOTedcaMjAwdGWI:tqpf32ABsahdQ9YUKLwnQW8cbAKGWI","tlshash":"73a31212967a6a66dcf0422bd1c8f38e13c62ec1698d8937c538e09821ffd775e6521f","first_seen":"2023-05-09T09:40:47Z","last_seen":"2026-09-20T20:39:11.806168Z","times_seen":388,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/css/settings.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.303Z","timestamp":1789936685303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/css/settings.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6933\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29758,"size_decoded":7244,"mime_type":"text/css","magic":"ASCII text, with very long lines (29758), with no line terminators","md5":"38acf48ad405e053349b09d0db0e05eb","sha1":"00e45587d87b55d60b5dac52b718707697ce2a24","sha256":"b592970ca861e715751d3f8aa6f7279b081031b18bd82939eca0adedd0e50dcc","sha512":"f93852b0cbe2cb235de89e860649ef31b0f53e80726d7b51a9e5d1b108c5f1fe908e3f48741896a4d155c5b26ab0106986943fbfe0eb0433cda1ea3e347541c4","ssdeep":"384:7Tx/MEIw4rLT4ILX8sSW0gOWC7m7C5+TU1Zz80id48f/:7dMEULTPX8sSWpOWCS7wmU1h8D283","tlshash":"81d2ea70f18975fc77a7c22663c0b7ad702ed123ea520daef02f72f986d30864466658","first_seen":"2025-03-06T21:46:19.854423Z","last_seen":"2026-09-20T20:39:11.80681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/main-slider/bus.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.641Z","timestamp":1789936685641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/main-slider/bus.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 193327\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":193327,"size_decoded":193594,"mime_type":"image/png","magic":"PNG image data, 762 x 612, 8-bit colormap, non-interlaced","md5":"a403cdc5da48c23ab2dcfdfae898a0b4","sha1":"40fa5d191d740930a4955ec7a611f97d5253bb1f","sha256":"39ab194cc682738c068c9d5cf05783503989225ecc9ac0af5ecc1b93841dea61","sha512":"f50c8cdef1f67e4dc43fed270e8971bcc5a503ac92c33caf0c9c846da6d3a3c666a92666b301a71609acdebc5ea346e79bb5ecfe98a999f30419a9154854f0bc","ssdeep":"3072:zvAYdrFvjBNpG7oiVIQf2cYb7tOgftWifiFUdoSKr13s1AIwK47kmdgjeS3+tsvZ:z4YQZsPV9tWgTA39IwKEN5SUshKk","tlshash":"e01412e588d374d408efd58187aaff121992052b2dcfa32793a2933c6e07113ddbe665","first_seen":"2024-10-04T11:12:03.551317Z","last_seen":"2026-09-20T20:39:11.80751Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2099,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-2.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.663Z","timestamp":1789936685663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-2.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2528\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2528,"size_decoded":2794,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3","md5":"738d9306c59cfb5e16805f6867ba2be6","sha1":"42c3f499724da3477aebf302d44acd4dcd79adeb","sha256":"34a8cce8dd2a023089d62174d1c182cf8235ef224fad50d71018abf8d8d8f8f2","sha512":"1fa87fa6597b4b11eb89aa15a7297fa595d23bc02e027ef8777dd3cfe8a3d9dc302d05ab53dd814eb36ca52ae2241dc9208bccead9868bba5ee9df4c75f890c9","ssdeep":"","tlshash":"59510a3f3be7b65fc8b48472afcd1386c28a0d1745859468b1cac682c32b457dc745da","first_seen":"2024-10-04T11:12:03.627263Z","last_seen":"2026-09-20T20:39:11.808446Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/style.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.311Z","timestamp":1789936685311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/style.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Jun 2024 15:29:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 30342\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":312583,"size_decoded":30654,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"0363cb7fada50d593abd7efdede5bbcb","sha1":"ee898e948faa2a3a5a01a34fda084e12a91a9c84","sha256":"0ded22c7c4786c4398cd04c871e684836d9531f200d48ada9f5742f4dd0f4f90","sha512":"1a46c6ff8ab3467b01b3eb2b4981fd7810f8e17a93aae1e72559188d5303b846f3c0848126c654389c2a85f00f70e19115b8f1ec52eeb5a1ceb2a0a96a697938","ssdeep":"1536:CQG75aQ4+WT0a0WO0/0z0S0OhMEuGL/bw+S59GBLxBIl+kjzCKDjB3kQzspkv4W8:24CuGL/UpXCKDjB3PMRDfpRx","tlshash":"6b643319c62111066133ab686bd55318f774a073eb0712e8bbdea1448ff69acc162fdf","first_seen":"2024-10-04T11:12:03.433834Z","last_seen":"2026-09-20T20:39:11.809153Z","times_seen":31,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/background/4.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.998Z","timestamp":1789936689998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/background/4.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10737\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10737,"size_decoded":11004,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1894x672, components 3","md5":"9161046856e001a49f048ec7ead0ebd1","sha1":"71c1f848abceab290d3364a3c2053f2b90dafb85","sha256":"63e8e29a53001f1fa3d84c0cf95e9657b3f751213c1765fba9e5328c5e4c7e6b","sha512":"df968929f0c9275b220fccef9ee550239c0ce58e080b6f77916b7680789987c4f46626ecb54dceb9ac1e67b170bce89408d3eb813dd88de059160328b1d670bf","ssdeep":"96:yu26dC6O7FYJa8Zka0AtajDtLOeW4cYxWS3+5slZF5xapJ5:yu2gC6O7uJWGtqOegIWS3+6zx2","tlshash":"3e223bc3bb03c2bbc5a957b0edb703387f334779961a42425946043429f6b906c9b6c5","first_seen":"2024-10-04T11:12:03.653495Z","last_seen":"2026-09-20T20:39:11.810001Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/script.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.629Z","timestamp":1789936685629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/script.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Apr 2024 01:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3150\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11267,"size_decoded":3389,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2462)","md5":"165c3147e10d9f9aec2fc4e03acc9a39","sha1":"674bf57fdc4a43a2733b173a16f4a6d1ff9217b1","sha256":"ea8841daba93bb64420abf4c8c11c273c6b487720c0a32daecd1f900e5f22344","sha512":"fa51a475d85726b69b6a10b898e79252989d441956d5c1e996f45288b847e76bc1e420e0057551f67b9b3c7ec9318186220bc23c31c1bbce8c29d499996cc860","ssdeep":"192:/M7z9IKvr/zkLEeGvSlK1uwcUgjb5KF/gGUbvf87Qykk3wCk:ZE/uwZPQy+","tlshash":"ee32b905f32034b680ff727ad50b9b41bbb6599ac2819101f0f6443d1fe598ab5bbb1e","first_seen":"2024-10-04T11:12:03.478118Z","last_seen":"2026-09-20T20:39:11.810816Z","times_seen":37,"resource_available":true,"data":null}},"time_used":2110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/5-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.659Z","timestamp":1789936685659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/5-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3505\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3505,"size_decoded":3770,"mime_type":"image/png","magic":"PNG image data, 172 x 84, 8-bit colormap, non-interlaced","md5":"37c6a33a4823a9721e11022fc01c95e0","sha1":"d26e26feec897f4c53992575da99692a965f9885","sha256":"211377b49962c270f14dd20282adb02d898f5676a7ea65eadbb45a663ff3514c","sha512":"b2bea15d54b0c267648f1228b05c8128a37e8e65769c838dc20f23ca1369e43b5ddd0a8bd27a4202a9427d8bfc4bd81499eac6851489de2c4e8c1574202b96cd","ssdeep":"","tlshash":"79716dead2fc2552dfd596bc310d4171c882e8ab67b570a2a046db37ae8c152c8111e0","first_seen":"2024-10-04T11:12:03.619563Z","last_seen":"2026-09-20T20:39:11.81168Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3078,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3078,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/animate.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.762Z","timestamp":1789936685762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Jun 2024 15:30:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 4303\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82549,"size_decoded":4614,"mime_type":"text/css","magic":"ASCII text","md5":"630cdf0f24b4b4838a53c495ad0b9ac7","sha1":"d330f4fab10d41a301b1754af3b14f43f71b6edc","sha256":"816daf5d69a626526dd0fc0b482de6668d454234d0619c6476c2934bd4dba8d6","sha512":"704fda82bf1dc97edcc566c05ab51211c361e0630cd2d672602c08fb76e2cdee13c091eb9ae5d89b46fa2853a09150c8f9cc0d9a2f2496b35565c8556897e3af","ssdeep":"768:nneZeuvsvleye0v6vAvsv6v6vWiCigvqvc:0vsvHv6vAvsv6v6vovqvc","tlshash":"b9833c6d19a111445367892983df4e78663ce1731826acee73ce5c8bcf86fac63c9643","first_seen":"2024-10-04T11:12:03.446153Z","last_seen":"2026-09-20T20:39:11.812524Z","times_seen":32,"resource_available":true,"data":null}},"time_used":4081,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4072,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-block.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.986Z","timestamp":1789936689986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-block.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1528\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1528,"size_decoded":1793,"mime_type":"image/png","magic":"PNG image data, 164 x 180, 8-bit colormap, non-interlaced","md5":"0c3f631250ba89f13ee53f73ebd1d318","sha1":"34e2509120bfbcad80ff61042f9cb8c306afed70","sha256":"543e31715d9eaa1a8524c9a0dc0b8190bb050fdc2f0cb7ba4ed1cb5ae741b6d4","sha512":"ffb0d8e79161d66c5cef0d9209fc53d720525e24a1ef4e9c2145d156ac07509ed83d7db16efcb4de4ebec20aa71efae48080c95996f405d12400f7123ee832ae","ssdeep":"","tlshash":"5a31f98e53cd0d34ee30d3795597c8be8bb611523f51b25e8123b1109c9382252ebc0c","first_seen":"2024-10-04T11:12:03.597544Z","last_seen":"2026-09-20T20:39:11.813225Z","times_seen":33,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.156Z","timestamp":1789936690156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37347\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T22:48:13.148023Z","times_seen":47039,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/odometer.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.363Z","timestamp":1789936685363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/odometer.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3665\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10260,"size_decoded":3904,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10260), with no line terminators","md5":"9cc5a91ec99e51f3c2d5dfd52cd5a711","sha1":"855628980708cae2ce7e7173bc130e3c24f11863","sha256":"6560e1e62dd42383fca13f500d9ac9dd479915069e2e7234822113825fb8e847","sha512":"964b34d8941b6e7c95e527d533eca88b5ac7523f56bc86697460a544a8fa015710c2a34f3033d0749ff6068b0ffe25e69b6dce1bf610f4f454062cd7d1ea4d3b","ssdeep":"192:5ABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:SBhv18QecCxVxz+7dlT","tlshash":"b1229680ba11a735835371e151bf060ab7bb99bea404401df67c9dd9be29c38e12bf74","first_seen":"2024-02-29T22:11:53Z","last_seen":"2026-09-20T20:39:11.814176Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1502,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/5.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.658Z","timestamp":1789936685658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/5.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3493\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3493,"size_decoded":3758,"mime_type":"image/png","magic":"PNG image data, 172 x 84, 8-bit colormap, non-interlaced","md5":"3b024cc354459131cd9b4d0b86028679","sha1":"196cab653cca0feb3767f396eb8886db637161b7","sha256":"9963a29402172730a38878c1279832379be5becbac1873c743f4c5dc91693e17","sha512":"16a4beb6b7165b9302b7f94fb9d75fb242f13ce177d14e75b05feb1c0627af76604eb1a179dfbb8bc19af3862bab318659a7c420e03153cf01767e661d0725b2","ssdeep":"","tlshash":"72717ef571a1eee4eed1c679503c50a1d8344d76b73873390422ae099a35bc0f2537a1","first_seen":"2024-10-04T11:12:03.617605Z","last_seen":"2026-09-20T20:39:11.815104Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/fonts/revicons/revicons90c690c690c6.woff?5510888","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.430Z","timestamp":1789936690430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/fonts/revicons/revicons90c690c690c6.woff?5510888 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/plugins/revolution/css/settings.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: font/woff\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7536\r\ndate: Sun, 20 Sep 2026 20:38:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7536,"size_decoded":7801,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-09-20T21:37:03.368586Z","times_seen":33016,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.500Z","timestamp":1789936693500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa903df-891\"\r\nexpires: Tue, 15 Sep 2026 08:45:00 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k7sVw7QpJEDVJGiAgkCm8nQpdb1naAjH96W8GaAurZTX40eqqYeoxSf/Rckyj6J30Mgv8MY\r\nx-77-nzt-ray: fdb541233a0ea9545a44b06a0b39e421\r\nage: 475093\r\nx-77-cache: HIT\r\nx-77-age: 2343\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1045,"mime_type":"application/json","magic":"JSON text data","md5":"d3bf99e1aae5fe61840075977c32fc08","sha1":"92e9f68592ad767e421e2d9d0fc2dc090fdbfc7d","sha256":"a46e74c0e02a932725399c083e9c080d89a74355efdc44c0e689384355c3220d","sha512":"7a0d22bc90615e11450cfa9de74c58942a1a0872f1e94cb70fae4aaa556c4bc85bf088a5f4072fc81550de014285423822523f5aeb8c5f1079dcd480817ce904","ssdeep":"","tlshash":"7b415783c4b80d431b8c262bb89655415d50c3c7ec893d4e766e9a7f2f4cea910e677d","first_seen":"2026-09-15T08:49:00.586011Z","last_seen":"2026-09-20T20:55:55.054533Z","times_seen":174,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":32,"connect":13,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/appear.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.354Z","timestamp":1789936685354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/appear.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 703\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1552,"size_decoded":941,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (752)","md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-09-20T20:39:11.817043Z","times_seen":2848,"resource_available":true,"data":null}},"time_used":1409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/service1-3.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.649Z","timestamp":1789936685649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/service1-3.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26472\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26472,"size_decoded":26739,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 370x260, components 3","md5":"3e12adf46e8f5515179c0a85f7dcdb36","sha1":"771d160ee49e761f9993a4c570822b79f3fdf67a","sha256":"be0a44874fc8de5fda7f195dc1a4b9af349f3f5d1fab3d1a5b1b75c8b4d902ff","sha512":"83695f5b9616cae513b6b15ee5b93329fdd5f13be89863557c847d05506dd283489ee846fe40aadbfebd55bee54da67570c0220df9e693fd84fc4114af17c443","ssdeep":"768:909WYSb36hkoTYtdQqXi3ZvfBEDUpzO4pPDRHR0suWQW:SkDxdfi31fBEe/DnuhW","tlshash":"53c2e123df4bc91d921c46db7cf2a5167056e489803f13aed67e0aad42e33f7d890691","first_seen":"2024-10-04T11:12:03.603903Z","last_seen":"2026-09-20T20:39:11.817697Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2108,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/1-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.651Z","timestamp":1789936685651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/1-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2447\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2447,"size_decoded":2712,"mime_type":"image/png","magic":"PNG image data, 207 x 84, 8-bit colormap, non-interlaced","md5":"68568381f282694e70af8910bda601d7","sha1":"a8f6fdcbecf59970def5af44108746ffc14d579e","sha256":"aaf8445bcb3c29aab36388de87ba26aeceb16249347a5fa76b26feed092589be","sha512":"0723fa5b4dcd17c030ce8f2ea268b142ab83953fd10b2fe173b6255464c3405444a3106372f2bae1829ccf6760626dbca59b4d7e7bc5e5c5d15942a038930d13","ssdeep":"","tlshash":"25510887524f881c4aba934de1a240d3028ada9a2e4f822b9d4aedb7cc12685b15c523","first_seen":"2024-10-04T11:12:03.572491Z","last_seen":"2026-09-20T20:39:11.818548Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-3.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.664Z","timestamp":1789936685664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-3.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3855\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3855,"size_decoded":4121,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3","md5":"292377a3d1bed5a33c2edbeb67d956e5","sha1":"be3cdb35e8bc270feebc7c20fa8dbaf7dfa058f7","sha256":"f9c9f93888514a4ec8440bdf2a53b618e12522d8cd8f5a2955acb297711dbb69","sha512":"b39b82f66fb3c20187ec6308f2076ed69f38ed8ee7d441d48ef150a789c0923f54e5e6546acf0d51c5974546510f7ca0369738ad942402fd197b1f2fcf6a1db7","ssdeep":"","tlshash":"1f817de3831e80b7f06464ba99e792dd020a0a682d77efcbf437f9ac59648d010856e1","first_seen":"2024-10-04T11:12:03.631621Z","last_seen":"2026-09-20T20:39:11.819399Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3076,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/odometer-theme-default.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.770Z","timestamp":1789936685770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/odometer-theme-default.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 485\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3235,"size_decoded":795,"mime_type":"text/css","magic":"ASCII text, with very long lines (3235), with no line terminators","md5":"79e83129bd2d099b26d94f4552fb4ce9","sha1":"b2bfac4c37b6d148e3b4d94473afc0e35cc51c4a","sha256":"56db09de1a21b74eafbd0dd390e86f3bb06e436cb8b0dc612352a39adcb68753","sha512":"3352eaa1f300b9692394ed1ddf16abe5a77dd9bf72840496eee8fcedae84a653dd48533163fd432e93ac3eaf73862bffeaf4549ceccbf2b63afbb77fa5dc9f3d","ssdeep":"","tlshash":"a66115154f90032863367506bac81760befce9515123d58eb31ea54bcf43db9e398b0b","first_seen":"2024-10-04T11:12:03.463021Z","last_seen":"2026-09-20T20:39:11.820256Z","times_seen":34,"resource_available":true,"data":null}},"time_used":4072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/bg-color.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.989Z","timestamp":1789936689989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/bg-color.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2861\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2861,"size_decoded":3126,"mime_type":"image/png","magic":"PNG image data, 370 x 93, 8-bit colormap, non-interlaced","md5":"2e3b6320e4fba42f2c5c148fc8d7b93d","sha1":"734f550d6e7d070157a88d579da04b7068e03f35","sha256":"8346de7d1f69eea10bc5b89c3ef52c10d84589e19815494abd3789861a50c8d3","sha512":"dedd710fcb8a830a2910ed4e75843e8540b6bd363119f171a072fe863d5a50c68b2955d72e1ca4455fce7f62333a43e401aa96427c056ee164e239605516b46f","ssdeep":"","tlshash":"2951b3a3787965edcc392c93d2a0da4d85f7b4c89b08b93d2272126dd710d4efa400eb","first_seen":"2024-10-04T11:12:03.600617Z","last_seen":"2026-09-20T20:39:11.821124Z","times_seen":33,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/fontawesome.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.769Z","timestamp":1789936685769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/fontawesome.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 61444\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":441007,"size_decoded":61756,"mime_type":"text/css","magic":"ASCII text, with very long lines (65459)","md5":"4959134a0c7b0976c8fecfb93751bc00","sha1":"519be94551c0b7208f7239560708c9bd9eb83b12","sha256":"9d27b1f4315fc9e29ad3bf3754caa72417e080cd19b70d49d033f08fa7549cc7","sha512":"5be603a0a4e1cbbde3a04f98dc4441e40449897b45ba764799e780f6a9de80a6ca9117dc4dd9f07e89cf96a1d5515f4699e28354cf01a259ec85a1dc9bfecd30","ssdeep":"3072:Lj9O+Qjjv0tkUscKfh8/Gun5PmjMOXH7qPxA:LhORj+c8/GymjMLA","tlshash":"8494cba0a05d11dda3a7d60f5f02b53ad4b3f33ed9814e4ae0c6494e0dd3ba871857ea","first_seen":"2024-10-04T11:12:03.459365Z","last_seen":"2026-09-20T20:39:11.821978Z","times_seen":56,"resource_available":true,"data":null}},"time_used":4073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4065,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-shape.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.993Z","timestamp":1789936689993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-shape.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11408\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11408,"size_decoded":11674,"mime_type":"image/png","magic":"PNG image data, 1920 x 649, 8-bit colormap, non-interlaced","md5":"83ae4b2c1e7cd064d808eb45220bf79c","sha1":"b40abda86c402c3d2a165c6e7c9e24307d13477d","sha256":"e7319b17c8350d5bc106c77f896f1666458b524a4aac767c816e4c1d478f423c","sha512":"1811953f6557a35681fed0e19ce368f9e91526c3af3b9a5b64359a387f8107e2dc8bfb7020da99ee450b4265ac9d27ad98c4eb88680522d95e6a3ad52f5d21be","ssdeep":"192:P86nfmJ2DzcGEAyMrTYwuIwjslHZdUypAf/rr5Yx1G0nMDAUnxv5512njkLT3TiC:P8cfmIDGWMw8j2ZSLrGopnxvp2njkPTp","tlshash":"4632aff494875a556fbd07f208314b36b90feb79aba18e8a32dedd785317021b1c06c9","first_seen":"2024-10-04T11:12:03.645455Z","last_seen":"2026-09-20T20:39:11.822574Z","times_seen":32,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-building.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.997Z","timestamp":1789936689997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-building.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5354\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5354,"size_decoded":5619,"mime_type":"image/png","magic":"PNG image data, 300 x 304, 4-bit colormap, non-interlaced","md5":"9308cec6d4fb523380f5154a958c6b78","sha1":"a09a08443825528184f7f7c7b41cad2fc88bd60e","sha256":"e50d4233d66346edeed068d7d43aca1635de624b99e20a622c8d6b43bc51ee53","sha512":"8b4009ae5a24eebbf592482b354234dcc17112ea2913ce02b813517dd5bcc6c09670a087c5935a2d264e7ce716ed8ff44cd8af94864265516eec3e7ae655c71e","ssdeep":"96:irl6Gr1le5Qde7JNPWOCgnFb841PLH4RCJwI1ZWDC7p31BMldn7iPvY+0+ATdz:jQle51PWOfnFY41PLYRCJwCEC7pFBMfj","tlshash":"02b18d4b738df5ba1083cb7150446ab8b8e366fb9751d3d9159d4c8f6d29f32c42212d","first_seen":"2024-10-04T11:12:03.651832Z","last_seen":"2026-09-20T20:39:11.823449Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/fa-solid-900.woff2","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.034Z","timestamp":1789936690034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 270360\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":270360,"size_decoded":270628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 270360, version 393.14155","md5":"27437db6b41f3f3e3884c9a964839bf5","sha1":"6ddadf82f1ae1237799deac1bd915fabd9b59a48","sha256":"4dd3561bac1f21c70270e2f4d93e30b9eaa7538b5fb12b6f6d5d9a74033e5750","sha512":"de92cb165acb42fc2fa2a2f2f60a0c0f67335416e10161e9aa761bcf93a5b731c5e94327e54429e1bdb384bded2759b4d01274293269d859ae3e6b1d95d95560","ssdeep":"6144:nbOwyhnm677akgRifVxxfIBRX0EjreYeNJo0Sr76QjeCbugcEEvrcAC4s/Jfqm:naDARFDBveDo0u7pfb3cEEIAA5t","tlshash":"7744234b742fcac66908d646ac0b9035da2f3aca090eff47ee807515166dcfe91235db","first_seen":"2023-05-04T11:03:34Z","last_seen":"2026-09-20T20:39:11.824341Z","times_seen":493,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/wow.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.352Z","timestamp":1789936685352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/wow.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2242\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6299,"size_decoded":2481,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-09-20T20:39:11.825004Z","times_seen":4145,"resource_available":true,"data":null}},"time_used":1410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1364,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/owl.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.365Z","timestamp":1789936685365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/owl.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 12168\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":52300,"size_decoded":12408,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2166)","md5":"1febf37f7caae0f4dfdcb8a566eb84ec","sha1":"55b6c4d4f0e89d06c4cde3c5eeed3f5ed1e2bc50","sha256":"ffd9dc420f8465f1b39a34507f45aab5251c2fcf879ed61ad25e7aa6afe874b2","sha512":"12809f14edfeec7fe3a528eba6945eccfc1ac2498649d4ba275192c6a36b7d9e7a054853b2ed48aeafa45dd1877faa7fdf0a7ed5e752054cbf6576f6dbd0f3bc","ssdeep":"768:nAzJAMo9RyOpwUHLuudvayiRvaDpHcSY3U88hc5m:nAKMo93wUHLuuxWaDp8bH8hH","tlshash":"3933a605b320192d43dba271667f1306733b950cd810616dbd74aaddaea9809a13fffd","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-09-20T20:39:11.825656Z","times_seen":67,"resource_available":true,"data":null}},"time_used":2206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2199,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-4.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.665Z","timestamp":1789936685665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-4.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3229\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3229,"size_decoded":3495,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 80x80, components 3","md5":"0d6bde7b13bebc01ed144d675890c1a5","sha1":"ab2611c47e5e7ab9c6112145758cfb26734a3afa","sha256":"403a032f477eb0fd339b6af2a2aba4873ff69e188edace4be38ed8e3aae3f6b6","sha512":"e328612736fde878186cfa06b8a4f8c456abb2d5327ce731099217414f47451d1f7446f19a6ace7b0569655aee6d870c7cc1902dd9cef1c4e6b46ce135768be1","ssdeep":"","tlshash":"4b615b16b621932afbe8533a683da0907f07b0c5710683451cf34d7c63e18701a86991","first_seen":"2024-10-04T11:12:03.633871Z","last_seen":"2026-09-20T20:39:11.826308Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3075,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/images/background/2","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.996Z","timestamp":1789936689996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /images/background/2 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 496\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":957,"size_decoded":735,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"796e6845bdc8f1b833d5aa6a4b96b073","sha1":"e0babe1162cd18fa8fa5a0da10017a0abf24eecd","sha256":"28ab54e1bb505a0dc6c9625787b95ca6ba7e1dbea9b88db91ba76e62607deb81","sha512":"93ab488751910a256c6119e04bb630c684734636e7156bd3f45621d53fa9bc8ac8a2b490f4979439c418ebc377856beebdfd3465f8633ffb43457f3c84f8d251","ssdeep":"","tlshash":"4911406f480e0e7e12008362f110322ec0cfaf5baa466480e47f0ab66ad0785c53d598","first_seen":"2026-09-20T20:38:52.471316Z","last_seen":"2026-09-20T20:39:11.745893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/jquery.themepunch.tools.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.325Z","timestamp":1789936685325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 37871\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110419,"size_decoded":38111,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27287)","md5":"19d4f48f4835f709ce89e903945463da","sha1":"da149c4015cbfcf532bd7d19171799fa45cec695","sha256":"df9d8dd88e97a897d0be8ef27eb76357d276aeabb67320756b753e5e61eac5d4","sha512":"815598cadbe84115a5ca2850049cca0e301b676a9a9ae713bdf5b012eef5f1324756b24213df112449f65fcbfb9d56b466ab7a955b372378e6ef8b0a6056fa55","ssdeep":"1536:XQpnayKBk7l5aknBDU0KsIu5XOD1ITONqvniqL3P99cN7H98rYx5f14/gCs0fXwq:XS7lYoDU0Gjqvniq7s7dCYSIn0fD0a9","tlshash":"5eb319ca35517022859622a5517f0643723bdceab4098d3df548d9ed3e2cc8921bffba","first_seen":"2023-03-07T01:03:25Z","last_seen":"2026-09-20T20:39:11.827159Z","times_seen":2637,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.333Z","timestamp":1789936685333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 14114\r\ndate: Sun, 20 Sep 2026 20:38:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55805,"size_decoded":14354,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55556)","md5":"bdf209292b3d2e9c16de6fdecd4bd77f","sha1":"c0849053ea2399b75ade5d2be6f1baaee7f3e5e1","sha256":"2b4488725ceb13f3bb8ed8461c8d2bcd6e463a0321e9bcee9903a966182d515e","sha512":"11f68485a12034c1ebf43e9e0a6fe1aaecb14ff61d58bb37979cd4559a99e9465a200c283980166a1d31634899e604010772aa4c765deac68e8e733a54d03eb2","ssdeep":"1536:tWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:tWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"2943fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.827788Z","times_seen":513,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/storage/app/public/photos/BAGTA55Dxaq1CDavj6GoFNeBVr5raeixhwk81H6X.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:11.761Z","timestamp":1789936691761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /storage/app/public/photos/BAGTA55Dxaq1CDavj6GoFNeBVr5raeixhwk81H6X.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 Dec 2023 14:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4063\r\ndate: Sun, 20 Sep 2026 20:38:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4063,"size_decoded":4328,"mime_type":"image/png","magic":"PNG image data, 101 x 175, 8-bit/color RGBA, non-interlaced","md5":"4d7460a2fcb9aab0f091c3b2e8bacd84","sha1":"c19d6862bdabd2b20bac0dd448188d0ad3890964","sha256":"3ac7e2422f5e97c36bc5cb708c520cb09d06fab0dc7cd311f45639576cba1f97","sha512":"474e063cfd2fab716e68460ef34198631c267fc579111b66e45b8ce2d96c400d475218bbb013f80aff43042c48da30704cb7b8d46452f3689bf598f7f620dc6d","ssdeep":"","tlshash":"01818e9d5931891c6ab4641010a607de5e13cc36f88d8bfe6c067d755c88d9bcde0d5e","first_seen":"2024-08-19T14:16:27.218157Z","last_seen":"2026-09-20T20:39:11.828445Z","times_seen":82,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.506Z","timestamp":1789936693506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Sun, 20 Sep 2026 23:04:51 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 2001\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lH%2F4bEY18shJBAUe2VYdNlMXciA869%2BPYe3R2LRHbhYzfEz2VxZE6K6Ay%2BbTyMxIGgwHvsLa8j86O413HhBS5%2BfhCY2dRJDS58sILAPRKHyJN6%2FXgNwtfU68haZ34zIAZ7c69RI%3D\"}]}\r\ncf-ray: a3e3a1ee6e58c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":129345,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-20T20:39:11.829119Z","times_seen":3147,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.594Z","timestamp":1789936693594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BPT5w8s3.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-3e9c\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k+lWTC/MsSRsx1FyP+BmadfaNmF+yOVSyUcjvQ54MnttG9D6zPuVoXxcfX12cNVUvXFEYIs\r\nx-77-nzt-ray: fdb541233a0ea9545a44b06a7041ad23\r\nage: 475075\r\nx-77-cache: HIT\r\nx-77-age: 475075\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6769,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.598Z","timestamp":1789936693598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: ky+YB67PoJvHAUHa21V3MU2/lrTMDDLEjIgJHbFidYPPbJK0Ba41gTG/S66Q8D3MPXprOSs\r\nx-77-nzt-ray: fdb541233a0ea9545a44b06aeab9fb23\r\nage: 475074\r\nx-77-cache: HIT\r\nx-77-age: 475074\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8226,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-20T20:55:55.053163Z","times_seen":174,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.343Z","timestamp":1789936685343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.video.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 7088\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":26075,"size_decoded":7327,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25833)","md5":"06a23d419ce283a4afff5d3dd510a1b8","sha1":"42e1489f5708d7512b0a6eced2bef264b530e465","sha256":"16f812a25b351e209e92b5004bc6513146566eee8d88c73d7bf81ef4451aa9f6","sha512":"4ad03403e5a90a52e3af25235654ed81477b8401e1ec8a95892f4efaf3026119ef5e14aac1a6e48a7cfdec5861101285ad2346a5554efc973dd64087dabd9172","ssdeep":"384:sSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:pkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"c0c2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.831065Z","times_seen":383,"resource_available":true,"data":null}},"time_used":1419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1282,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/select2.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.361Z","timestamp":1789936685361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/select2.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 19610\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70891,"size_decoded":19850,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64131)","md5":"86fee17cd48a321dbb33df5c823a3d95","sha1":"c51a8d16981e09b1e1fadb7fe4fd9564a8d96dc2","sha256":"c8467b98f112bb1b06a33cde66a70de85c05d22a455f91f592554c804a50a729","sha512":"bf4b0087cda491025408c4aea6910f55deb3719e9076d16d75394a7b547d401653a2a827458ab0e9bcf913b7166c712c54508cfd617f38f490516f6b27342097","ssdeep":"768:noeWucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOw7uZRgydn/RcSf2bK/Jw:18hC3jIG+kOvebyJJ1CD","tlshash":"5663c74c7a537234426f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","first_seen":"2023-03-07T12:57:41Z","last_seen":"2026-09-20T20:39:11.831951Z","times_seen":4387,"resource_available":true,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1402,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/fonts/fa-regular-400.woff2","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.045Z","timestamp":1789936690045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 315700\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":315700,"size_decoded":315968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 315700, version 393.14155","md5":"5b2dad1f9126a770b3a1a64056043c08","sha1":"b681d4686d59944e78dea3579234307f4be6e603","sha256":"f0c616b40c22bf761652211dd2d451690458868b2797bbf702fc5eb850579068","sha512":"1230c0040b267325be3a173d10bf957dcef3332e10a6c606ffcdb80582f4e59d079de784bd179d5d773639780116b3ac07523fce33441f56b2625a3369268129","ssdeep":"6144:6mUkit86e5wU6DLGy0Z2MQOaRxwxm1s/Ra5OnjWEwjy/gA8GoFy:fm8jvKyy0QwfRa5aTwoaY","tlshash":"c76423eda74e44cfdc7626e7046abb76420296f06aadcd4ca2c4f2252f18715cc6f702","first_seen":"2023-05-04T11:03:34Z","last_seen":"2026-09-20T20:39:11.832528Z","times_seen":345,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/3-1.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.655Z","timestamp":1789936685655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/3-1.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1728\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1728,"size_decoded":1993,"mime_type":"image/png","magic":"PNG image data, 143 x 84, 8-bit colormap, non-interlaced","md5":"c16a524b377f7138046d4b568e93851a","sha1":"8b74933713265ffd4398e35e8cbd4afa9386f5f7","sha256":"ecc0166b5c9b3a9a7f03c5c4a25556cbe10251d7ad0127001e395f412bc6f1e3","sha512":"f67fe44d156537c76d1addb3ac6070aea42b6e55320712209842364198994be66f266e556a5de9c23e6e4e1f05945ab25c54aeabda0b738a17b2be0a89b1e6ce","ssdeep":"","tlshash":"1831c8a230374fd2cb7c6430d4c5d2aef1a5f9d05d86278bd95cd73b3ca14269670689","first_seen":"2024-10-04T11:12:03.61277Z","last_seen":"2026-09-20T20:39:11.833123Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-globe.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.994Z","timestamp":1789936689994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-globe.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11822\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11822,"size_decoded":12088,"mime_type":"image/png","magic":"PNG image data, 458 x 429, 2-bit colormap, non-interlaced","md5":"4448935a1e0aaee5ddf4efd79f94781f","sha1":"ece5a1d46db365fcf624862901d902e9d36d38ed","sha256":"10cf97e7f542a221653e1cb35af04715288df4c14cd807bd0e2ca469bb46aff8","sha512":"2568db879405d2779939c4a81a1c08422b7bad9edaf508998a38df464b9e0a0d5508d67653a141484ae29081c58c7f83c848d7376724367d7067ee2987fe40cf","ssdeep":"192:Y7af/5fUYD7DvKM3pWF/VT9xjcQwQ1tbmMl+HbUjD2S8HIpY4c0zUcwsK6VGS8PP:Y7G/5fHHVZeRY3Q1t6Ml0bUp8mcIl7Kv","tlshash":"a632b04c5645b8bf04333145efa7add8ae34966336d5422120a5bcf74336fa22e42a9b","first_seen":"2024-10-04T11:12:03.647776Z","last_seen":"2026-09-20T20:39:11.833911Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/2.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.652Z","timestamp":1789936685652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/2.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2701\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2701,"size_decoded":2966,"mime_type":"image/png","magic":"PNG image data, 93 x 84, 8-bit colormap, non-interlaced","md5":"07f2535e9457885c0d842588017686ad","sha1":"dcb064ad25b0f1a9b57bd161612255406b39625c","sha256":"95300264925bd5be054c3f53249d16853a59de81056b7498bdc1e9a1961d44a9","sha512":"a3fdb305e6a37dfe6cd6b5d423a46c735a3b5e778415089eff92076347b22686525989cb8b220748d72919f036ac6c2e64c455d7c6fef5485b51d7a93b6c5f2d","ssdeep":"","tlshash":"035118c7acaa9e3b57eb1c37974071964e34e94017f12316c829e6c3bda5da04780acb","first_seen":"2024-10-04T11:12:03.606706Z","last_seen":"2026-09-20T20:39:11.834694Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-feature.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.977Z","timestamp":1789936689977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-feature.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2095\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2095,"size_decoded":2360,"mime_type":"image/png","magic":"PNG image data, 133 x 134, 8-bit colormap, non-interlaced","md5":"5af9146d8b129f76563ced5fd3aae972","sha1":"b645bbbfcdcd791a060b5d253631afeec3639692","sha256":"51bafa155b44f13494cdf7a3934aed18d3b0e1eaefa2c8fd565889f8d371b8a7","sha512":"4662b04b3af53e0a6b340d009a10acab1757fd5796eefda21ccba0692f10a374566a18776284705553d4f58a07bc68014b9eb2bfa52b5be2404d1aa68f44b595","ssdeep":"","tlshash":"d7411acf64c24462d5911139661892eefc2254c61aaf8015fbe12aa6f90cffc2b9d5b2","first_seen":"2024-10-04T11:12:03.588905Z","last_seen":"2026-09-20T20:39:11.835462Z","times_seen":33,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.038Z","timestamp":1789936690038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37347\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T22:48:13.148023Z","times_seen":47039,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":33,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:13.596Z","timestamp":1789936693596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DKOWJlLK.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:38:13 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-4e9d1\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k4d1mLrY9h6jVZ8u033z2JRyz35wmKcolY6/lUzUfnsH5YE95lPl1ZO/lNq231x0lvkoT7A\r\nx-77-nzt-ray: fdb541233a0ea9545a44b06a94bfce23\r\nage: 475074\r\nx-77-cache: HIT\r\nx-77-age: 475074\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107702,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/js/main-slider-script.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.345Z","timestamp":1789936685345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/js/main-slider-script.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 14 May 2024 07:05:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 728\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1359,"size_decoded":966,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1359), with no line terminators","md5":"91b21e3505a325a709594969365f0946","sha1":"80f01a601b877ebdac03a83e2d0ee3054049ce28","sha256":"029592820bfbb39b58a6543d48b9ccd131484ffa602d4ce3d6a841d6d94d5422","sha512":"b774f981654d3d019516727a249f540f89f725888e61c1f46ddda85d83bf905803d42a3de6c4ebe6d0d5c707f6a1e4990027750bdaddb61fd227947ce991e7ae","ssdeep":"","tlshash":"ae2163225111d8ab4a73532a53050d04e7f25c26be237960e198137a9c52b9a578f3ce","first_seen":"2024-10-04T11:12:03.441297Z","last_seen":"2026-09-20T20:39:11.836907Z","times_seen":37,"resource_available":true,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/storage/app/public/photos/IqiTh1pseRL0rOK2sVdK42FpOt0dfOO7WWzkAR8w.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.638Z","timestamp":1789936685638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /storage/app/public/photos/IqiTh1pseRL0rOK2sVdK42FpOt0dfOO7WWzkAR8w.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 Dec 2023 14:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18475\r\ndate: Sun, 20 Sep 2026 20:38:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18475,"size_decoded":18741,"mime_type":"image/png","magic":"PNG image data, 967 x 305, 8-bit/color RGBA, non-interlaced","md5":"95d27fc37137c967ab5b141a96a3dba2","sha1":"c1e7d17b5c4a2e4b58f670318182b8e94b142502","sha256":"8cd4b55b5ced1b7f656cc4fee26c59dfee493d2aaa487dd20188e097b620348d","sha512":"85c188dc978e672ec90191afe5d86241a8c0c9c6e3fd84330f21ed69c1e86998ef1fdf857fce102d679bbe3bbd7531a09ee288543e233dd298e363c76e28e680","ssdeep":"384:OGQt5uRbD9bvPS2BzEs3Z3S9wo3I8klHv9rXwdjtd7QiwdU:OGQW5TKyzEs3Rcwo336v9Lwdj77QPU","tlshash":"dd82d12dcab9ce5cc5d441b197d36df30f491571cb8e373a89c1b22c127a0ac359a68e","first_seen":"2024-08-19T14:16:27.177549Z","last_seen":"2026-09-20T20:39:11.837505Z","times_seen":179,"resource_available":false,"data":null}},"time_used":2346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-map.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.985Z","timestamp":1789936689985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-map.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4120\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4120,"size_decoded":4385,"mime_type":"image/png","magic":"PNG image data, 307 x 151, 8-bit colormap, non-interlaced","md5":"4b6abc0e0eb379c802f4c741efdc15fe","sha1":"301e33d94af14d633cd1f7895d38bc1307cf74e5","sha256":"66b96599f53ab483c244b058b0b60e191d281df07d9f1c703144cf487d348fe0","sha512":"158186183edc9465f4cf7617a2d6e2166467ad2a99d3a23396432e20b8ff23d9a10739972089f4b39c5bd738bfbec5d3a0d35ee5adfafae0edb5fe4498c84a53","ssdeep":"96:BEo51pCaXnHDv0lwn6BACLN4h14j5uAh5ATD8ddbDTR:KKp9XHIlTLaE5RjQ8PbDF","tlshash":"bc815c349b7441629fd6469547eb0764635ffe8e0b807339e6f1ec2391a430dea0248a","first_seen":"2024-10-04T11:12:03.595109Z","last_seen":"2026-09-20T20:39:11.838126Z","times_seen":33,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ggsggsgggg.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.631Z","timestamp":1789936685631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 20:48:23 GMT","end":"Tue, 17 Nov 2026 21:48:09 GMT"},"fingerprint":{"sha1":"A5:45:1F:A3:11:15:24:79:E1:DF:21:FD:FB:BB:07:64:A3:36:EA:A0","sha256":"03:50:0F:F5:B3:92:09:57:C2:06:97:D1:F2:1E:31:76:ED:B8:67:6E:44:BD:F4:CD:8B:C3:68:D9:BE:15:DD:B5"}}},"request":{"raw":"GET /ggsggsgggg.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9\r\nserver: cloudflare\r\nage: 29\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpxStf14ZMKlby%2BrA9s1TI%2FyCdOFfmxfN87pSM6%2FYBIDcbkmz1XaAZvNgUHVfFPrfUSN6MA%2BIuuc0wavbx8nRMiPNIERXLe9Nlu3oFDQ7UMNOrw0vgn1m53Seh9oCxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e3a1d0fb91569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":540,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-09-20T20:50:23.321332Z","times_seen":10562,"resource_available":true,"data":null}},"time_used":3210,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":46,"receive":0,"ssl":3152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-1.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.662Z","timestamp":1789936685662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-1.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3872\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3872,"size_decoded":4138,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3","md5":"1625b169b076290b21f0308adb2b4c7e","sha1":"55199028d7682cb2c4fb9ce5d1975ce8e7f01a8f","sha256":"ca477ae23112233ec7523289faa36ac4f63b2ad55b1c64f2e52b67c9a3e2002b","sha512":"daea71da0fcb868e8eff7f8ad9fdc4b1d252a870d51fc48d4a58bf84abdd33c09c02939750dedb71cc182c98a386d17666f38f6e15e047ba2fb24582dc10012d","ssdeep":"","tlshash":"99816d9a06114203f035dc76dbbea6fd972621096b50b03dc60df8e56da8201c9ba19a","first_seen":"2024-10-04T11:12:03.625094Z","last_seen":"2026-09-20T20:39:11.838911Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/resource/gallery-thumb-5.jpg","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.666Z","timestamp":1789936685666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/resource/gallery-thumb-5.jpg HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2639\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2639,"size_decoded":2905,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x80, components 3","md5":"779f6bbb2cced3c7b69a5766e11d1e03","sha1":"c0f0b76e200af50b3ab1c7ecda6bba86e2aae4b8","sha256":"c8c326fa69786df50ec73a21eaab4ada1614fce1485083334eb9d269dcdbe1c5","sha512":"6d282c2d753d8ba19892879082feb9c042046a1127eb8ecc9ff90f7cbd1c8a8e784b7474e7b2ce87f50836fff23e58d97ec26ca9f4e2f67db5b19f5c2d546d08","ssdeep":"","tlshash":"5751093a53974053db37037729fac27952ab0a4f91bd2b8b2c51e864c93f4c54dba588","first_seen":"2024-10-04T11:12:03.638174Z","last_seen":"2026-09-20T20:39:11.844526Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3083,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3074,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/css/tm-utility-classes.css","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.774Z","timestamp":1789936685774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/css/tm-utility-classes.css HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1619\r\ndate: Sun, 20 Sep 2026 20:38:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11066,"size_decoded":1930,"mime_type":"text/css","magic":"ASCII text, with very long lines (11066), with no line terminators","md5":"288baa102d47d0020d700f53a834e7f2","sha1":"3d56fbad52ab2fd18f2f83abcc9fb1725512ab18","sha256":"4f2755f0beede05b669c555cd4c968d2913726be3ee553b8e25b5145bd138088","sha512":"a42cb48fd2b5925c037c8b9b89bc418d734079ff432fe824468edf026c4f8f3d50f7ee1bec9b7ea2013f335f8ccb68fb3aad9b69a8fa902dc134afc3aae8dc88","ssdeep":"192:sgWljj3H4pr/YK3DbJlrTjXD7JFypasY5P1A0i1r:sFjz4F/Y+hBFIaBDA0i1r","tlshash":"313204e3f2da441d741e892a6140bfbd7c7f8551c7168f38aa99f7b48bc00eb165260e","first_seen":"2023-06-05T23:31:04Z","last_seen":"2026-09-20T20:39:11.845394Z","times_seen":64,"resource_available":true,"data":null}},"time_used":4070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4069,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-shape-2.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:09.983Z","timestamp":1789936689983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-shape-2.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 574\r\ndate: Sun, 20 Sep 2026 20:38:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":574,"size_decoded":838,"mime_type":"image/png","magic":"PNG image data, 70 x 90, 8-bit colormap, non-interlaced","md5":"143cbb886773f25c86b37f46d2082c2e","sha1":"37baadff2d317cc8c27b0941863da4441b109d1d","sha256":"82b0a8c02c91ef9726dc8565f9cd0c4868a8a455245c7c000045d533fd31040d","sha512":"99ae93a7901475f468533c4711beaecf36058986784f607e3c4561b2f82d89104e16a54fac4dd27bafdac6c10660380b278b35361a437887502f60e8cfcba6ce","ssdeep":"","tlshash":"c9f026b2dab19dd0ad290b849b5497d4c43904471451d153997140cf573f757f3d0b74","first_seen":"2024-10-04T11:12:03.592695Z","last_seen":"2026-09-20T20:39:11.84597Z","times_seen":35,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.039Z","timestamp":1789936690039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://extremglobalventures.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37347\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T22:48:13.148023Z","times_seen":47039,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":28,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/icons/icon-quote.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:10.159Z","timestamp":1789936690159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/icons/icon-quote.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/temp/custom/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 489\r\ndate: Sun, 20 Sep 2026 20:38:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":489,"size_decoded":753,"mime_type":"image/png","magic":"PNG image data, 42 x 30, 8-bit/color RGBA, non-interlaced","md5":"30f3522a34a6cfeb3c36ca72c40778f5","sha1":"04a7701f4b7fdb223e03af7bd1942d891560ce92","sha256":"ee6a72344fefda3a3d8d11af31e68d877c8060fbe3c0d009c7acdc7a14793e14","sha512":"4040195f4358d8918efbdebf5676a9710e34fec8c640a3d8f5f5d274a41b0547593bf88be96d52d9c00f04e05aa067a4f4abaaa7f3931cd4c1987de3712da5bf","ssdeep":"","tlshash":"18f00ef233ac24d86d92ec6615174274c00601a16e8ab6c44d61202ae16a98297ea68e","first_seen":"2024-10-04T11:12:03.641904Z","last_seen":"2026-09-20T20:39:11.846529Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1092,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/images/clients/4.png","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.656Z","timestamp":1789936685656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/images/clients/4.png HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:38:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 20 Apr 2024 02:47:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2414\r\ndate: Sun, 20 Sep 2026 20:38:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2414,"size_decoded":2679,"mime_type":"image/png","magic":"PNG image data, 92 x 84, 8-bit colormap, non-interlaced","md5":"798e543284804a74eedd2a6cf5e0f1ae","sha1":"0425ed55644328895d3acffaa8f48ef0a1749330","sha256":"93a60b5edad3ab8ae66d2347fef5a6314b9c847a6ace7dd5914704ec94acc6e9","sha512":"8b87027e302a367fbf42f361b6d99575675383c9627d50e8acb4d3d8a4db31d2cd7ed1d5009c735ac9158bad19f26b98f8484f0cd347cd01416a293fb9b75c6e","ssdeep":"","tlshash":"6e41f9885e3ddc07eeba4c3a1e733556fd2002560862858aa5a6b1cd9d10654852bafb","first_seen":"2024-10-04T11:12:03.614525Z","last_seen":"2026-09-20T20:39:11.847175Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extremglobalventures.com/temp/custom/plugins/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"extremglobalventures.com","domain":"extremglobalventures.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extremglobalventures.com/","date":"2026-09-20T20:38:05.337Z","timestamp":1789936685337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extremglobalventures.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:53:53 GMT","end":"Wed, 11 Nov 2026 09:53:52 GMT"},"fingerprint":{"sha1":"DF:43:11:AD:72:87:7F:7D:CF:09:91:71:61:46:98:23:CE:2A:D9:10","sha256":"8B:17:00:86:22:F6:17:90:D2:1D:B4:35:31:B7:66:33:82:26:40:E2:50:ED:C9:D2:77:EC:19:9B:E7:52:3D:3D"}}},"request":{"raw":"GET /temp/custom/plugins/revolution/js/extensions/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: extremglobalventures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extremglobalventures.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9nWnQyeGtLUnR4S1VQa1padi9SZ2c9PSIsInZhbHVlIjoiR3lvOSsrN2M5SnI4blZwWHp3VGFTbjdsVlFSakhNUHpoQ1NDY0NZWXVSR3dHamlsd0JUK1RST2l2b3I1UXNDMkpCR2p4ODc5Vis0akZCY0NkZmZiZFNaalI1RmhmakxsMVl3UkdVU0J5L1I2OWlKczIwQldxVDB0dnY2ZWJlTEIiLCJtYWMiOiJlMGU1NzIxODIxNzQ0N2E1ZThmNWYzMDQyMTY1ZmJhZGE3OGY0ZjQ0ZjI1NjA4ZGY0MGMzM2RhMmZhNDYyNjIwIiwidGFnIjoiIn0%3D; extrem_global_session=eyJpdiI6ImMvbllvTkZvRFZra01ySjJzYTh5cnc9PSIsInZhbHVlIjoiM3RQZHlPdkkvSThjMXJoU0dSVVFnR0VyejZBOGVYcW03Tjh2RXJZcDU3M3dleExRRUtrODkyTElWNzRaM1doQXJlUEZiVkJmRjZKczVVbzM0dHNsK0haUitmaVpsdU81TDNuS3o4QUxxOTR0cm5vcTlXVWYyc2dzd3RCT1MraHEiLCJtYWMiOiJlN2M0ZWFiNzkyZTEyNzg5OTVkYmYyODQxMzcyMzQxZTUyN2IxNjA0OGM0YTE2YTllM2NiNGViNjVhNGJmZWE0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 20 Apr 2024 02:47:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 6985\r\ndate: Sun, 20 Sep 2026 20:38:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26099,"size_decoded":7224,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25862)","md5":"0e0daef44ed6ad5559d6c29c0e413e0a","sha1":"ea8c0943a23a87528e394115ea20d3ae0d3e8c14","sha256":"fe1591e3534594f770789ebbf62b4d8657f735f87f8576fe8dca2d807b4d7079","sha512":"c5ea53743f997c9f568c10db81fd0a46a303bdeadd069a7451a70b4e12fd81e2316c7f04ffbdef0bacfcb809005cbbe87d6d3c7f63602a8d200858f51f009def","ssdeep":"384:XhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:XIObR3zXpcN12H2DqZ9iA9QE","tlshash":"dfc2a8a9769038ab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","first_seen":"2023-03-07T01:33:59Z","last_seen":"2026-09-20T20:39:11.770779Z","times_seen":512,"resource_available":true,"data":null}},"time_used":1425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1274,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"extremglobalventures.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}